ID CVE-2017-7475
Summary Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.
References
Vulnerable Configurations
  • cpe:2.3:a:cairographics:cairo:1.15.4:*:*:*:*:*:*:*
    cpe:2.3:a:cairographics:cairo:1.15.4:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 12-02-2023 - 23:30)
Impact:
Exploitability:
CWE CWE-476
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
refmap via4
misc
mlist [oss-security] 20170428 CVE-2017-7475 Cairo-1.15.4 Denial-of-Service Attack due to Logical Problem in Program
Last major update 12-02-2023 - 23:30
Published 19-05-2017 - 20:29
Last modified 12-02-2023 - 23:30
Back to Top