NetSight
IP …
high8.8

CVE-2016-1522

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls …

Impact

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

Affected products

VendorProductAffected versions
FedoraprojectFedora
Versions 22, 23
MozillaFirefox
Versions 38.0, 38.0.1, 38.0.5, 38.1.0, 38.1.1, 38.2.0
MozillaThunderbird
through 38.5.1
DebianDebian Linux
Versions 7.0, 8.0
SilGraphite2
Version 1.2.4

Weakness classification

CWE-119

References