CVE-2017-7960

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html
• blogs.gentoo.org/ago/2017/04/17/libcroco-heap-overflow-and-undefined-behavior · Exploit
• git.gnome.org/browse/libcroco/commit · Patch
• security.gentoo.org/glsa/201707-13 · Third Party Advisory

libcroco のその他の脆弱性

• CVE-2020-12825高 7.1libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.
• CVE-2017-8871中 6.5The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite …
• CVE-2017-8834中 6.5The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocation…
• CVE-2017-7961高 7.8The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" …