NVD

Id
31268  
Name
CVE-2014-2977  
Description
Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-06-11  
Modified Date
2016-04-07  
Seq
2014-2977  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
163831 31268 CVE-2014-2977 http://advisories.mageia.org/MGASA-2015-0176.html  View
163832 31268 CVE-2014-2977 openSUSE-SU-2015:0807  View
163833 31268 CVE-2014-2977 SUSE-SU-2015:0839  View
163834 31268 CVE-2014-2977 [directfb-dev] 20140327 IDirectFBSurface Dispatch_Write bugs  View
163835 31268 CVE-2014-2977 MDVSA-2015:223  View
163836 31268 CVE-2014-2977 [oss-security] 20140516 [CVE-2014-2977] DirectFB integer signedness vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14044 JVNDB-2014-002919 DirectFB の proxy/dispatcher/idirectfbsurface_dispatcher.c における整数符号エラーの脆弱性 DirectFB の proxy/dispatcher/idirectfbsurface_dispatcher.c 内の Dispatch_Write 関数には、整数符号エラーの脆弱性が存在します。 CVE-2014-2977 70264 CVE-2014-2977 31268 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002919.html 2014-03-27 2015-06-26 View