CVE-2016-2799
HighSummary
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6 allows remote attackers to exploit this vulnerability. This affects Mozilla Firefox before version 45.0 and Firefox ESR 38.x before version 38.7.
Risk Assessment
Attackers may cause a denial of service or potentially trigger unspecified other impacts, leading to application disruption and user data exposure.
Recommendation
It is recommended to update Graphite 2 to version 1.3.6 or later and to upgrade Mozilla Firefox to version 45.0 or later and Firefox ESR to version 38.7 or later.
Other vulnerabilities in Graphite 2, Mozilla Firefox
See all- CVE-2016-2801High
The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2800High
The graphite2::Slot::getAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2798High
The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2797High
The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2796High
A heap-based buffer overflow exists in Graphite 2 before version 1.3.6, used in Mozilla Firefox before version 45.0 and Firefox ESR 38.x before version 38.7, in the function graphite2::vm::Machine::Code::Code. This allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2795High
The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure. This allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.
- CVE-2016-2794High
The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2792High
The graphite2::Slot::getAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2791High
The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
- CVE-2016-2790High
The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure. This may allow remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.
Original NVD description (English source)
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.