CVE

Id
77067  
CVE No.
CVE-2014-9766  
Status
Candidate  
Description
Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.  
Phase
Assigned (20160224)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
706958 77067 CVE-2014-9766 MLIST:[Pixman] 20140409 [PATCH] create_bits(): Cast the result of height * stride to size_t  View
706959 77067 CVE-2014-9766 URL:https://lists.freedesktop.org/archives/pixman/2014-April/003244.html  View
706960 77067 CVE-2014-9766 MLIST:[oss-security] 20160224 Re: [Pixman] create_bits(): Cast the result of height * stride to size_t  View
706961 77067 CVE-2014-9766 URL:http://www.openwall.com/lists/oss-security/2016/02/24/15  View
706962 77067 CVE-2014-9766 MLIST:[oss-security] 20160224 [Pixman] create_bits(): Cast the result of height * stride to size_t  View
706963 77067 CVE-2014-9766 URL:http://www.openwall.com/lists/oss-security/2016/02/24/13  View
706964 77067 CVE-2014-9766 MLIST:[xorg-announce] 20140705 [ANNOUNCE] pixman release 0.32.6 now available  View
706965 77067 CVE-2014-9766 URL:https://lists.x.org/archives/xorg-announce/2014-July/002452.html  View
706966 77067 CVE-2014-9766 CONFIRM:https://bugs.freedesktop.org/show_bug.cgi?id=69014  View
706967 77067 CVE-2014-9766 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=972647  View
706968 77067 CVE-2014-9766 CONFIRM:https://cgit.freedesktop.org/pixman/commit/?id=857e40f3d2bc2cfb714913e0cd7e6184cf69aca3  View
706969 77067 CVE-2014-9766 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
706970 77067 CVE-2014-9766 DEBIAN:DSA-3525  View
706971 77067 CVE-2014-9766 URL:http://www.debian.org/security/2016/dsa-3525  View
706972 77067 CVE-2014-9766 UBUNTU:USN-2918-1  View

Related JVN