Lucene search

K
mozillaMozilla FoundationMFSA2012-64
HistoryAug 28, 2012 - 12:00 a.m.

Graphite 2 memory corruption — Mozilla

2012-08-2800:00:00
Mozilla Foundation
www.mozilla.org
21

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.113 Low

EPSS

Percentile

95.2%

Using the Address Sanitizer tool, Mozilla security researcher Christoph Diehl discovered two memory corruption issues involving the Graphite 2 library used in Mozilla products. Both of these issues can cause a potentially exploitable crash. These problems were fixed in the Graphite 2 library, which has been updated for Mozilla products.

CPENameOperatorVersion
firefoxlt15
seamonkeylt2.12
thunderbirdlt15

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.113 Low

EPSS

Percentile

95.2%