Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-18064

Опубликовано: 08 окт. 2018
Источник: debian

Описание

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).

Пакеты

ПакетСтатусВерсия исправленияРелизТип
cairounfixedpackage

Примечания

  • https://gitlab.freedesktop.org/cairo/cairo/issues/341

  • Negligible security impact

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 8 лет назад

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).

CVSS3: 6.3
redhat
около 8 лет назад

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).

CVSS3: 6.5
nvd
около 8 лет назад

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).

CVSS3: 6.5
github
больше 4 лет назад

cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).

CVSS3: 6.5
altlinux
около 8 лет назад

ALT-PU-2018-2560: package `libcairo` update to version 1.16.0-alt1

Уязвимость CVE-2018-18064 в Debian — exploitDog