CVE-2015-5297 Integer overflow in pixman
An integer overflow in Pixman allows attackers to crash applications or execute arbitrary code via crafted input.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2015-5297?
CVE-2015-5297 is a medium-severity vulnerability in The pixman Project pixman, published on 31 Jul 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
An integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8. An attacker could exploit this issue to cause an application using pixman to crash or, potentially, execute arbitrary code.
Weakness: CWE-190
Which versions are affected by CVE-2015-5297?
It affects 1 product.
Products include Pixman Pixman.
How do I fix CVE-2015-5297?
Upgrade to a fixed version.
Is CVE-2015-5297 being exploited?
There is no known exploitation of CVE-2015-5297 in the wild and no public exploit code.
Other vulnerabilities in The pixman Project pixman
Sources
Also known as DEBIAN-CVE-2015-5297, DLA-1587-1, GHSA-3896-rgxr-mxjp, UBUNTU-CVE-2015-5297, USN-3843-1.