medium5.0Public exploit code
CVE-2014-5116
The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wireshark 1.10.7 - Denial of Service (PoC)2014-05-16 · dos · windows · Verified
Impact
The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a large string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cairographics | Cairo | Version 1.10.2 |