CVE ID:	CVE-2013-6425
Description:	Integer underflow in the pixman_trapezoid_valid macro in pixman.h in Pixman before 0.32.0, as used in X.Org server and cairo, allows context-dependent attackers to cause a denial of service (crash) via a negative bottom value.
Test IDs:	1.3.6.1.4.1.25623.1.0.881849   1.3.6.1.4.1.25623.1.0.867888   1.3.6.1.4.1.25623.1.1.10.2013.0366   1.3.6.1.4.1.25623.1.0.881852   1.3.6.1.4.1.25623.1.0.868094   1.3.6.1.4.1.25623.1.0.123488   1.3.6.1.4.1.25623.1.1.4.2014.0023.1   1.3.6.1.4.1.25623.1.0.867895   1.3.6.1.4.1.25623.1.0.871103   1.3.6.1.4.1.25623.1.0.868061   1.3.6.1.4.1.25623.1.0.120572   1.3.6.1.4.1.25623.1.0.868157   1.3.6.1.4.1.25623.1.0.702823   1.3.6.1.4.1.25623.1.0.121134
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6425 DSA-2823 http://www.debian.org/security/2013/dsa-2823 RHSA-2013:1869 http://rhn.redhat.com/errata/RHSA-2013-1869.html USN-2047-1 http://www.ubuntu.com/usn/USN-2047-1 [Pixman] 20131110 [ANNOUNCE] pixman release 0.32.0 now available http://lists.freedesktop.org/archives/pixman/2013-November/003109.html [oss-security] 20131203 CVE Request: xorg-server and pixman http://www.openwall.com/lists/oss-security/2013/12/03/8 [oss-security] 20131204 Re: CVE Request: xorg-server and pixman http://www.openwall.com/lists/oss-security/2013/12/04/8 http://cgit.freedesktop.org/pixman/commit/?id=5e14da97f16e421d084a9e735be21b1025150f0c http://cgit.freedesktop.org/pixman/commit/?id=5e14da97f16e421d084a9e735be21b1025150f0c https://bugs.freedesktop.org/show_bug.cgi?id=67484 https://bugs.freedesktop.org/show_bug.cgi?id=67484 https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1197921 https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/1197921 openSUSE-SU-2014:0007 http://lists.opensuse.org/opensuse-updates/2014-01/msg00001.html openSUSE-SU-2014:0011 http://lists.opensuse.org/opensuse-updates/2014-01/msg00005.html openSUSE-SU-2014:0014 http://lists.opensuse.org/opensuse-updates/2014-01/msg00008.html openSUSE-SU-2014:0145 http://lists.opensuse.org/opensuse-updates/2014-01/msg00097.html