CVE-2017-7960

Mô tả

Tham khảo

• lists.opensuse.org/opensuse-security-announce/2019-06/msg00043.html
• blogs.gentoo.org/ago/2017/04/17/libcroco-heap-overflow-and-undefined-behavior · Exploit
• git.gnome.org/browse/libcroco/commit · Patch
• security.gentoo.org/glsa/201707-13 · Third Party Advisory

Lỗ hổng khác của libcroco

• CVE-2020-12825CAO 7.1libcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c, leading to stack consumption.
• CVE-2017-8871TRUNG BÌNH 6.5The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite …
• CVE-2017-8834TRUNG BÌNH 6.5The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocation…
• CVE-2017-7961CAO 7.8The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" …