CVE-2016-2794
HighSummary
The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
Risk Assessment
This vulnerability may lead to denial of service, affecting application availability and user trust. Attackers could exploit this flaw to destabilize the system.
Recommendation
It is recommended to update Graphite 2 to version 1.3.6 or later and to upgrade Mozilla Firefox to version 45.0 or later to mitigate the risk.
Other vulnerabilities in Graphite 2, Mozilla Firefox
See all- CVE-2016-2801High
The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2800High
The graphite2::Slot::getAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2799High
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6 allows remote attackers to exploit this vulnerability. This affects Mozilla Firefox before version 45.0 and Firefox ESR 38.x before version 38.7.
- CVE-2016-2798High
The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2797High
The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2796High
A heap-based buffer overflow exists in Graphite 2 before version 1.3.6, used in Mozilla Firefox before version 45.0 and Firefox ESR 38.x before version 38.7, in the function graphite2::vm::Machine::Code::Code. This allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2795High
The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure. This allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.
- CVE-2016-2792High
The graphite2::Slot::getAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2791High
The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2790High
The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure. This may allow remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.
Original NVD description (English source)
The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.