847 matches found
UBUNTU-CVE-2018-12293
The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which...
Heap overflow
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...
DEBIAN-CVE-2016-5296
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...
CVE-2016-5296
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...
CVE-2016-5296
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...
CVE-2016-5296
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...
CVE-2016-5296
CVE-2016-5296 is a heap-based buffer overflow in Cairo when processing SVG content, caused by compiler optimization. It affects Mozilla Thunderbird and Firefox/Firefox ESR as described in Mozilla advisories, and is also present in IBM Storwize V7000 Unified (Affecting 1.5.0.0–1.5.2.5; fixed in 1....
CVE-2016-5296
A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 45.5, Firefox ESR 45.5, and Firefox 50...
SUSE SLES11 Security Update : cairo (SUSE-SU-2018:1453-1)
This update for cairo fixes the following issues : - CVE-2016-9082: Fixed a segfault when using 4GB images since int values were used for pointer operations bsc1007255. - CVE-2017-9814: Replace malloc with cairomalloc and check cmap size before allocating to prevent DoS bsc1049092. - CVE-2017-747...
SUSE-SU-2018:1453-1 Security update for cairo
This update for cairo fixes the following issues: - CVE-2016-9082: Fixed a segfault when using 4GB images since int values were used for pointer operations bsc1007255. - CVE-2017-9814: Replace malloc with cairomalloc and check cmap size before allocating to prevent DoS bsc1049092. - CVE-2017-7475...
openSUSE Security Update : cairo (openSUSE-2018-445)
This update for cairo fixes the following issues : - CVE-2017-9814: out-of-bounds read in cairo-truetype-subset.c could lead to denial of service bsc1049092. This update was imported from the SUSE:SLE-12-SP2:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...
SUSE SLED12 / SLES12 Security Update : cairo (SUSE-SU-2018:1195-1)
This update for cairo fixes the following issues : - CVE-2017-9814: out-of-bounds read in cairo-truetype-subset.c could lead to denial of service bsc1049092. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...
SUSE-SU-2018:1195-1 Security update for cairo
This update for cairo fixes the following issues: - CVE-2017-9814: out-of-bounds read in cairo-truetype-subset.c could lead to denial of service bsc1049092...
Node.js third-party modules: Media parsing in canvas is at least vulnerable to Denial of Service through multiple vulnerabilities
There is at least a DoS vulnerability in canvas. It segfaults node.js which leads to a Denial of Service, but according to !exploitable it could possibly be worse Module canvas node-canvas is a Cairo backed Canvas implementation for NodeJS. https://www.npmjs.com/package/canvas version: 1.6.9 Stat...
GHSA-5V3F-73GV-X7X5 cairo is vulnerable to denial of service due to a null pointer dereference
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FTLoadGlyph and FTRenderGlyph resulting in an application crash...
cairo is vulnerable to denial of service due to a null pointer dereference
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FTLoadGlyph and FTRenderGlyph resulting in an application crash...
cairo NULL pointer dereference
Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FTLoadGlyph and FTRenderGlyph resulting in an application crash...
Moderate Photon OS Security Update - PHSA-2017-0079
Updates of 'libxml2', 'go', 'cairo', 'openvswitch' packages of Photon OS have been released...