CVE Feed

    Dashboard / CVE / CVE-2013-1591

    CVE-2013-1591

    Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which triggers an infinite loop.

    Published:Sep 15, 2012
    Last Modified:Apr 11, 2025
    EPS:Jan 31, 2013
    EPSS Score:0.01394
    CVSS Score:9.8

    Affected Products

    Vendor
    Palemoon
    Product
    Pale Moon
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Virtualization

    Exploits

    https://bugzilla.redhat.com/show_bug.cgi?id=910149https://bugzilla.redhat.com/show_bug.cgi?id=910149

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    References

    http://cgit.freedesktop.org/pixman/commit/?id=de60e2e0e3eb6084f8f14b63f25b3cbfb012943f
    http://rhn.redhat.com/errata/RHSA-2013-0687.html
    http://rhn.redhat.com/errata/RHSA-2013-0746.html
    http://www.mandriva.com/security/advisories?name=MDVSA-2013:116
    http://www.palemoon.org/releasenotes-ng.shtml
    https://bugzilla.redhat.com/show_bug.cgi?id=910149
    https://support.f5.com/csp/article/K51392553
    https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0077
    http://cgit.freedesktop.org/pixman/commit/?id=de60e2e0e3eb6084f8f14b63f25b3cbfb012943f
    http://rhn.redhat.com/errata/RHSA-2013-0687.html
    http://rhn.redhat.com/errata/RHSA-2013-0746.html
    http://www.mandriva.com/security/advisories?name=MDVSA-2013:116
    http://www.palemoon.org/releasenotes-ng.shtml
    https://bugzilla.redhat.com/show_bug.cgi?id=910149
    https://support.f5.com/csp/article/K51392553
    https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0077

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High