Summary
Gustavo Grieco, Alberto Garcia, Francisco Oca, Suleman Ali, and others
discovered that Cairo incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2016-9082, CVE-2017-9814, CVE-2019-6462)
Stephan Bergmann discovered that Cairo incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service,
or possibly execute arbitrary code.
(CVE-2020-35492)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | cairo | 1.14.6-1ubuntu0.1~esm1 |
Vulnerabilities 4
-
Unscored —
Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invali…
-
Unscored —
cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds…
-
Unscored —
An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file ca…
-
Unscored —
A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can pr…