ISOMAN

CVE

CVE-2014-9766

Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.debian.org/security/2016/dsa-3525
  2. http://www.openwall.com/lists/oss-security/2016/02/24/13
  3. http://www.openwall.com/lists/oss-security/2016/02/24/15
  4. http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
  5. http://www.ubuntu.com/usn/USN-2918-1
  6. https://bugs.freedesktop.org/show_bug.cgi?id=69014
  7. https://bugzilla.redhat.com/show_bug.cgi?id=972647
  8. https://cgit.freedesktop.org/pixman/commit/?id=857e40f3d2bc2cfb714913e0cd7e6184cf69aca3
  9. https://lists.freedesktop.org/archives/pixman/2014-April/003244.html
  10. https://lists.x.org/archives/xorg-announce/2014-July/002452.html
  11. http://www.debian.org/security/2016/dsa-3525
  12. http://www.openwall.com/lists/oss-security/2016/02/24/13
  13. http://www.openwall.com/lists/oss-security/2016/02/24/15
  14. http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
  15. http://www.ubuntu.com/usn/USN-2918-1
  16. https://bugs.freedesktop.org/show_bug.cgi?id=69014
  17. https://bugzilla.redhat.com/show_bug.cgi?id=972647
  18. https://cgit.freedesktop.org/pixman/commit/?id=857e40f3d2bc2cfb714913e0cd7e6184cf69aca3
  19. https://lists.freedesktop.org/archives/pixman/2014-April/003244.html
  20. https://lists.x.org/archives/xorg-announce/2014-July/002452.html