CVE-2016-3190

概要

参考情報

• lists.opensuse.org/opensuse-updates/2016-04/msg00029.html
• bugzilla.redhat.com/show_bug.cgi
• cgit.freedesktop.org/cairo/patch/src/cairo-image-compositor.c · Exploit
• mail.gnome.org/archives/gnome-announce-list/2015-March/msg00047.html · Patch

cairo のその他の脆弱性

• CVE-2020-35492高 7.8A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input…
• CVE-2019-6462中 6.5An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to…
• CVE-2019-6461中 6.5An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c.
• CVE-2018-19876中 6.5cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMall…
• CVE-2018-18064中 6.5cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interacti…