NVD

Id
36351  
Name
CVE-2014-9766  
Description
Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-04-13  
Modified Date
2016-12-02  
Seq
2014-9766  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185962 36351 CVE-2014-9766 DSA-3525  View
185963 36351 CVE-2014-9766 [oss-security] 20160224 [Pixman] create_bits(): Cast the result of height * stride to size_t  View
185964 36351 CVE-2014-9766 [oss-security] 20160224 Re: [Pixman] create_bits(): Cast the result of height * stride to size_t  View
185965 36351 CVE-2014-9766 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
185966 36351 CVE-2014-9766 USN-2918-1  View
185967 36351 CVE-2014-9766 https://bugs.freedesktop.org/show_bug.cgi?id=69014  View
185968 36351 CVE-2014-9766 https://bugzilla.redhat.com/show_bug.cgi?id=972647  View
185969 36351 CVE-2014-9766 https://cgit.freedesktop.org/pixman/commit/?id=857e40f3d2bc2cfb714913e0cd7e6184cf69aca3  View
185970 36351 CVE-2014-9766 [Pixman] 20140409 [PATCH] create_bits(): Cast the result of height * stride to size_t  View
185971 36351 CVE-2014-9766 [xorg-announce] 20140705 [ANNOUNCE] pixman release 0.32.6 now available  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19281 JVNDB-2014-008159 Pixman の pixman-bits-image.c の create_bits 関数における整数オーバーフローの脆弱性 Pixman の pixman-bits-image.c の create_bits 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2014-9766 77059 CVE-2014-9766 36351 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008159.html 2014-04-09 2016-04-21 View