CVE-2014-9766
Fixed in a distro release EPSS 6%
Integer overflow in the create_bits function in pixman-bits-image.c in Pixman before 0.32.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via large height and stride values.
Products: pixman, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pixman | 0.32.6-1 |
| Debian 13 | pixman | 0.32.6-1 |
| Debian 14 | pixman | 0.32.6-1 |
| Debian 6.0 | pixman | 0.16.4-1+deb6u2 |
| Debian 7 | pixman | 0.26.0-4+deb7u2 |
| Ubuntu 14.04 LTS | pixman | 0.30.2-2ubuntu1.1 |