Vulnerabilities (CVE)

Filtered by vendor Gnome Subscribe
Filtered by product Libcroco
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-8834 2 Gnome, Opensuse 2 Libcroco, Leap 2020-08-19 4.3 MEDIUM 6.5 MEDIUM
The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (memory allocation error) via a crafted CSS file.
CVE-2017-8871 2 Gnome, Opensuse 2 Libcroco, Leap 2020-08-19 7.1 HIGH 6.5 MEDIUM
The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted CSS file.
CVE-2017-7960 1 Gnome 1 Libcroco 2019-10-03 4.3 MEDIUM 5.5 MEDIUM
The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted CSS file.