CVE-2013-1591

CRITICAL9.8

Stack-based buffer overflow in libpixman, as used in Pale Moon before 15

Published Jan 31, 2013

Modified 1 years ago

Details

Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which triggers an infinite loop.

References

WEB

http://cgit.freedesktop.org/pixman/commit/?id=de60e2e0e3eb6084f8f14b63f25b3cbfb012943f

ADVISORY

http://rhn.redhat.com/errata/RHSA-2013-0687.html

ADVISORY

http://rhn.redhat.com/errata/RHSA-2013-0746.html

ADVISORY

http://www.mandriva.com/security/advisories?name=MDVSA-2013:116

WEB

http://www.palemoon.org/releasenotes-ng.shtml

WEB