CVE-2014-5116

The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a large string.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
VendorProductVersion
cairographicscairo
1.10.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wireshark
bionic
Fixed 2.6.3-1~ubuntu18.04.1
released
artful
ignored
zesty
ignored
yakkety
ignored
xenial
Fixed 2.6.3-1~ubuntu16.04.1
released
wily
ignored
vivid
ignored
utopic
ignored
trusty
Fixed 2.6.3-1~ubuntu14.04.1
released
precise
ignored
lucid
ignored
References
http://www.exploit-db.com/exploits/33384
http://www.osvdb.org/107083
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9761
http://www.exploit-db.com/exploits/33384
http://www.osvdb.org/107083
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9761