GNOME libcroco 0.6.11
Approved changes feed: RSS · Atom
cpe:2.3:a:gnome:libcroco:0.6.11:*:*:*:*:*:*:*
part: a version: 0.6.11 update: *
| Vendor | Gnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5) |
|---|---|
| Product | Libcroco (e7c81bfe-0c3f-5c7a-adc1-3dfa0e0d6b7e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libcroco |
purl2cpe | 2026-06-01 10:17:25.386371 |
pkg:deb/ubuntu/libcroco |
purl2cpe | 2026-06-01 10:17:25.386372 |
pkg:github/sailfishos-mirror/libcroco |
purl2cpe | 2026-06-01 10:17:25.386374 |
pkg:gitlab/redhat/libcroco |
purl2cpe | 2026-06-01 10:17:25.386375 |
pkg:rpm/centos/libcroco |
purl2cpe | 2026-06-01 10:17:25.386376 |
pkg:rpm/opensuse/libcroco |
purl2cpe | 2026-06-01 10:17:25.386378 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7961 |
vulnerable | 2026-06-08 05:10:06.620983 |
Details available
The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CSS file. NOTE: third-party analysis reports "This is not a security issue in my view. The conversion surely is truncating the double into a long value, but there is no impact as the value is one of the RGB components.
Published: 2017-04-19T15:00:00.000Z
Updated: 2024-08-05T16:19:29.446Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7960 |
vulnerable | 2026-06-08 05:10:06.619719 |
Details available
The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file.
Published: 2017-04-19T15:00:00.000Z
Updated: 2024-08-05T16:19:29.411Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.