Graphite: User-assisted execution of arbitrary code

🗓️ 22 Jun 2017 00:00:00Reported by Gentoo FoundationType

Graphite out-of-bounds write allows arbitrary code executio

Reporter	Title	Published	Views	Family All 155
IBM Security Bulletins	Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM Storwize V7000 Unified	18 Jun 201800:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM SONAS.	18 Jun 201800:35	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 45.9.0-alt1	20 Apr 201700:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 52.1.0-alt1	2 May 201700:00	–	altlinux
FreeBSD	mozilla -- multiple vulnerabilities	19 Apr 201700:00	–	freebsd
FreeBSD	graphite2 -- out-of-bounds write with malicious font	19 Apr 201700:00	–	freebsd
ArchLinux	[ASA-201704-6] firefox: multiple issues	21 Apr 201700:00	–	archlinux
BDU FSTEC	The vulnerability in the `FeatureRef::applyValToFeature` function of the Graphite font library in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.	22 Dec 202000:00	–	bdu_fstec
Tenable Nessus	CentOS 6 : firefox (CESA-2017:1104)	21 Apr 201700:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (CESA-2017:1106)	21 Apr 201700:00	–	nessus