CVE-2013-6425

pixman < 0.32.0 - Integer Underflow via Negative Bottom Value

Title source: llm
STIX 2.1

Description

Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.

References (13)

Core 13
Core References
Third Party Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1869.html
Third Party Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2047-1
Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://bugs.freedesktop.org/show_bug.cgi?id=67484
Patch, Third Party Advisory mailing-list x_refsource_mlist
http://lists.freedesktop.org/archives/pixman/2013-November/003109.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/12/04/8
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-01/msg00005.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-01/msg00008.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-01/msg00097.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2013/dsa-2823
Mailing List, Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2014-01/msg00001.html
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/12/03/8
Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1197921

Scores

EPSS 0.0288
EPSS Percentile 85.0%

Details

CWE
CWE-191
Status published
Products (20)
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 12.10
canonical/ubuntu_linux 13.04
canonical/ubuntu_linux 13.10
debian/debian_linux 6.0
debian/debian_linux 7.0
opensuse/opensuse 11.4
opensuse/opensuse 12.2
opensuse/opensuse 12.3
opensuse/opensuse 13.1
... and 10 more
Published Jan 18, 2014
Tracked Since Feb 18, 2026