PT-2016-1428

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Mozilla Firefox ESR 38.x versions prior to 38.7 Description The issue is caused by a buffer overflow in the graphite2::GlyphCache::glyph function of Graphite 2, which is...

PT-2016-1425

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 Description The issue is related to the graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2, which can be exploited...

PT-2016-1427

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 Description The issue is related to a buffer over-read in the graphite2::Slot::getAttr function, which can be exploited by remote...

PT-2016-1429

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR 38.x versions prior to 38.7 Description The graphite2::TtfUtil::GetTableInfo function in Graphite 2 does not initialize memory for an unspecified data...

PT-2016-1440

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions 38.x prior to 38.7 Description The issue is caused by a buffer overflow in the Machine::Code::decoder::analysis::set ref function. This can be...

PT-2016-1418

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions 38.x prior to 38.7 Description The issue is caused by a buffer overflow in the graphite2::TtfUtil::CmapSubtable12Lookup function, located in...

Mozilla Firefox and Firefox ESR Graphite 2 FeatureMap.cpp File Denial of Service Vulnerability

Mozilla FirefoxFirefox is an open source web browser; Firefox ESR is an extended support version of Firefox.Graphite is a set of enterprise-class open source system monitoring tools written in Python, using the Django framework , it is through a third-party tools or plug-ins for data collection ,...

MGASA-2016-0077 Updated graphite2/firefox packages fix security vulnerability

Multiple vulnerabilities in the graphite2 font library can result in information disclosure, denial-of-service application crashes, or code execution via out-of-bounds reads, a NULL pointer dereference, and a heap-based buffer overflow CVE-2016-1521, CVE-2016-1522, CVE-2016-1523, CVE-2016-1526...

Firefox ESR < 38.6.1 Multiple Graphite 2 Library RCE (Mac OS X)

The version of Mozilla Firefox ESR installed on the remote Mac OS X host is prior to 38.6.1. It is, therefore, affected by multiple remote code execution vulnerabilities in the Graphite 2 library : - An overflow condition exists in the Context Item functionality due to improper validation of...

Mozilla Firefox ESR Multiple Vulnerabilities (Feb 2016) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

PT-2016-1448 · Mozilla +3 · Firefox Esr +5

Name of the Vulnerable Software and Affected Versions: Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR 38.x versions prior to 38.6.1 Description: The issue is related to the setAttr function in Graphite 2, which can be exploited by remote attackers using a...

CVE-2016-1523

The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service missing initialization, NULL pointer dereference, a...

KLA10759 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilities have been found in Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions or obtain sensitive information. Below is a complete list of vulnerabilities 1. Lack of requests...

Mozilla Releases Security Updates

The Mozilla Foundation has released security updates to address vulnerabilities in Firefox and Firefox ESR. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: Firefox 44.0.2 Firefox ESR 38.6.1 US-CERT encourag...

CVE-2016-1523

The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service missing initialization, NULL pointer dereference, a...

Mozilla Firefox Code Execution Vulnerability (CNVD-2016-00903)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in the browser engine of Mozilla Firefox versions prior to 44.0 a...

CVE-2016-1930

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

Mozilla Firefox ESR Multiple Vulnerabilities (Jan 2016) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox ESR Multiple Vulnerabilities (Jan 2016) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Firefox ESR < 38.6 Multiple Vulnerabilities

The version of Firefox ESR installed on the remote Windows host is prior to 38.6. It is, therefore, affected by the following vulnerabilities : - Multiple unspecified memory corruption issues exist that allow a remote attacker to execute arbitrary code. CVE-2016-1930 - A buffer overflow condition...