8 matches found
SUSE CVE-2016-3190
The fillxrgb32lerpopaquespans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a negative span length...
Medium: cairo
Issue Overview: The fillxrgb32lerpopaquespans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a negative span length. CVE-2016-3190 Affected Packages: cairo Issue Correction: Run yum upda...
DEBIAN-CVE-2016-3190
The fillxrgb32lerpopaquespans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a negative span length...
Out-of-bounds
The fillxrgb32lerpopaquespans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a negative span length...
CVE-2016-3190
The fillxrgb32lerpopaquespans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a negative span length...
CVE-2016-3190: Improper Restriction of Operations within the Bounds of a Memory Buffer
The fillxrgb32lerpopaquespans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a negative span length...
cairo: out of bounds read in fill_xrgb32_lerp_opaque_spans
The fillxrgb32lerpopaquespans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a negative span length...
PT-2016-2277 · Cairo +2 · Cairo +2
Name of the Vulnerable Software and Affected Versions: cairo versions prior to 1.14.2 Description: The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via a negative span length. This is due to a buffer overflow in the fill...