CVE-2017-9814

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-07/msg00042.html · Mailing List
• bugs.freedesktop.org/show_bug.cgi · Exploit
• lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
• security.gentoo.org/glsa/201904-01 · Third Party Advisory

cairo のその他の脆弱性

• CVE-2020-35492高 7.8A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input…
• CVE-2019-6462中 6.5An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to…
• CVE-2019-6461中 6.5An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c.
• CVE-2018-19876中 6.5cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMall…
• CVE-2018-18064中 6.5cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interacti…