The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a large string.Referenceshttp://www.exploit-db.com/exploits/33384https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9761http://www.osvdb.org/107083