Lucene search

K
mozillaMozilla FoundationMFSA2012-25
HistoryApr 24, 2012 - 12:00 a.m.

Potential memory corruption during font rendering using cairo-dwrite — Mozilla

2012-04-2400:00:00
Mozilla Foundation
www.mozilla.org
24

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.032 Low

EPSS

Percentile

91.2%

Security research firm iDefense reported that researcher wushi of team509 discovered a memory corruption on Windows Vista and Windows 7 systems with hardware acceleration disabled or using incompatible video drivers. This is created by using cairo-dwrite to attempt to render fonts on an unsupported code path. This corruption causes a potentially exploitable crash on affected systems.

Affected configurations

Vulners
Node
mozillafirefoxRange<12
OR
mozillafirefox_esrRange<10.0.4
OR
mozillaseamonkeyRange<2.9
OR
mozillathunderbirdRange<12
OR
mozillathunderbird_esrRange<10.0.4

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.032 Low

EPSS

Percentile

91.2%