Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2013-1591

Опубликовано: 31 янв. 2013
Источник: nvd
CVSS3: 9.8
CVSS2: 10
EPSS Низкий

Описание

Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which triggers an infinite loop.

Комментарий

Adding additional products per

http://rhn.redhat.com/errata/RHSA-2013-0687.html

Red Hat Enterprise Linux 6

http://rhn.redhat.com/errata/RHSA-2013-0746.html

Red Hat Enterprise Virtualization 3

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:enterprise_virtualization:3.0:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:a:palemoon:pale_moon:*:*:*:*:*:*:*:*
Версия до 15.4 (исключая)

EPSS

Процентиль: 80%
0.01394
Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 12 лет назад

Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which triggers an infinite loop.

redhat
почти 13 лет назад

Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which triggers an infinite loop.

CVSS3: 9.8
debian
больше 12 лет назад

Stack-based buffer overflow in libpixman, as used in Pale Moon before ...

CVSS3: 9.8
github
больше 3 лет назад

Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which triggers an infinite loop.

oracle-oval
больше 12 лет назад

ELSA-2013-0687: pixman security update (MODERATE)

EPSS

Процентиль: 80%
0.01394
Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-190