CVE-2014-5116

EUVD-2014-5014
The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a large string.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
cairographicscairo
1.10.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
wireshark
artful
ignored
bionic
Fixed 2.6.3-1~ubuntu18.04.1
released
lucid
ignored
precise
ignored
trusty
Fixed 2.6.3-1~ubuntu14.04.1
released
utopic
ignored
vivid
ignored
wily
ignored
xenial
Fixed 2.6.3-1~ubuntu16.04.1
released
yakkety
ignored
zesty
ignored
References
http://www.exploit-db.com/exploits/33384
http://www.osvdb.org/107083
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9761
http://www.exploit-db.com/exploits/33384
http://www.osvdb.org/107083
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9761