NetSight
IP …
high8.1

CVE-2016-1526

The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, i…

Impact

The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, incorrectly validates a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 7.0, 8.0
MozillaFirefox
Versions 38.0, 38.0.1, 38.0.5, 38.1.0, 38.1.1, 38.2.0
MozillaThunderbird
through 38.5.1
SilGraphite2
Version 1.2.4
FedoraprojectFedora
Versions 22, 23

Weakness classification

CWE-119CWE-200

References