CVE-2013-1591

    Dashboard / Vulnerabilities / CVE-2013-1591

    CVE-2013-1591

    Published: 31 Jan 2013Last Modified: 10 Apr 2026

    Summary:

    Details: Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-dependent attack vectors. NOTE: this issue might be resultant from an integer overflow in the fast_composite_scaled_bilinear function in pixman-inlines.h, which triggers an infinite loop.

    References: http://rhn.redhat.com/errata/RHSA-2013-0687.html, http://rhn.redhat.com/errata/RHSA-2013-0746.html, http://www.mandriva.com/security/advisories?name=MDVSA-2013:116, https://support.f5.com/csp/article/K51392553, https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0077, http://cgit.freedesktop.org/pixman/commit/?id=de60e2e0e3eb6084f8f14b63f25b3cbfb012943f, https://bugzilla.redhat.com/show_bug.cgi?id=910149, http://cgit.freedesktop.org/pixman/commit/?id=de60e2e0e3eb6084f8f14b63f25b3cbfb012943f, https://bugzilla.redhat.com/show_bug.cgi?id=910149, https://bugzilla.redhat.com/show_bug.cgi?id=910149, http://www.palemoon.org/releasenotes-ng.shtml

    Affected packages

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2013-1591 | CVE-DB