Cairo up to 1.15.14 WebKitGTK+ cairo-rectangular-scan-converter.c _cairo_image_spans_and_zero memory corruption

entryeditHistoryDiffjsonxmlCTI

A vulnerability classified as critical was found in Cairo up to 1.15.14. Affected by this vulnerability is the function _cairo_image_spans_and_zero of the file cairo-rectangular-scan-converter.c of the component WebKitGTK+. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
8363745	03/31/2020	VulD...	discoverydate	1538956800		03/31/2020	accepted	100
8363796	10/09/2018	VulD...	cvss3_nvd_basescore	6.5	nist.gov	10/09/2018	accepted	90
8363795	10/09/2018	VulD...	cvss3_vuldb_rc	X		10/09/2018	accepted	90
8363794	10/09/2018	VulD...	cvss3_vuldb_rl	X		10/09/2018	accepted	90
8363793	10/09/2018	VulD...	cvss3_vuldb_e	X		10/09/2018	accepted	90
8363792	10/09/2018	VulD...	cvss2_vuldb_rc	ND		10/09/2018	accepted	90
8363791	10/09/2018	VulD...	cvss2_vuldb_rl	ND		10/09/2018	accepted	90
8363790	10/09/2018	VulD...	cvss2_vuldb_e	ND		10/09/2018	accepted	90
8363789	10/09/2018	VulD...	location	Website		10/09/2018	accepted	90
8363788	10/09/2018	VulD...	cve_nvd_summary	cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).	mitre.org	10/09/2018	accepted	100
8363787	10/09/2018	VulD...	cve_nvd_published	1538956800	mitre.org	10/09/2018	accepted	100
8363786	10/09/2018	VulD...	cve_assigned	1538949600	mitre.org	10/09/2018	accepted	100
8363785	10/09/2018	VulD...	cve	CVE-2018-18064	mitre.org	10/09/2018	accepted	100
8363784	10/09/2018	VulD...	price_0day	$0-$5k	see documentation	10/09/2018	accepted	100
8363783	10/09/2018	VulD...	url	https://gitlab.freedesktop.org/cairo/cairo/issues/341	gitlab.freedesktop.org	10/09/2018	accepted	100
8363782	10/09/2018	VulD...	date	1538949600 (10/08/2018)		10/09/2018	accepted	100
8363781	10/09/2018	VulD...	cvss3_nvd_a	H	nist.gov	10/09/2018	accepted	100
8363780	10/09/2018	VulD...	cvss3_nvd_i	N	nist.gov	10/09/2018	accepted	100
8363779	10/09/2018	VulD...	cvss3_nvd_c	N	nist.gov	10/09/2018	accepted	100
8363778	10/09/2018	VulD...	cvss3_nvd_s	U	nist.gov	10/09/2018	accepted	100