NetSight
IP …
critical9.8

CVE-2017-7778

A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized me…

Impact

A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

Affected products

VendorProductAffected versions
MozillaFirefox
before 52.2.0
before 54.0
MozillaThunderbird
before 52.2.0
DebianDebian Linux
Versions 8.0, 9.0
SilGraphite2
before 1.3.10

Weakness classification

CWE-119CWE-125CWE-787

References