Vulnerability in Cairographics Cairo
CVE-2014-5116
The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a large string.
EPSS: 0.078 (94.0th percentile) — read the EPSS interpretation.
Affected products
- Cairographics Cairo — versions 1.10.2
- N/a — versions n/a
References
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)