UBUNTU-CVE-2016-2795

The graphite2::FileFace::gettablefn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other...

UBUNTU-CVE-2016-2797

The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted Graphite smart...

UBUNTU-CVE-2016-2802

The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted Graphite...

PT-2016-1424

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 Description The issue is related to the graphite2::FileFace::get table fn function in Graphite 2, which does not initialize memory for...

PT-2016-1420

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 Description The issue is related to a heap-based buffer overflow in the graphite2::Slot::setAttr function. This can be exploited by...

PT-2016-1423

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 Description The issue is related to a heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function. This can be...

PT-2016-1418

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions 38.x prior to 38.7 Description The issue is caused by a buffer overflow in the graphite2::TtfUtil::CmapSubtable12Lookup function, located in...

PT-2016-1421

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR 38.x versions prior to 38.7 Description The issue is related to a buffer over-read in the graphite2::GlyphCache::Loader::Loader function, which can be...

PT-2016-1428

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Mozilla Firefox ESR 38.x versions prior to 38.7 Description The issue is caused by a buffer overflow in the graphite2::GlyphCache::glyph function of Graphite 2, which is...

PT-2016-1417

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 Description The issue is related to the graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2, which can be exploited ...

PT-2016-1419

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions 38.x prior to 38.7 Description The issue is caused by a buffer overflow in the graphite2::Slot::getAttr function in Graphite 2, which can be exploit...

PT-2016-1422

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 Description The issue is related to the graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2, which can be exploited by...

PT-2016-1425

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 Description The issue is related to the graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2, which can be exploited...

PT-2016-1427

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions prior to 38.7 Description The issue is related to a buffer over-read in the graphite2::Slot::getAttr function, which can be exploited by remote...

PT-2016-1429

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR 38.x versions prior to 38.7 Description The graphite2::TtfUtil::GetTableInfo function in Graphite 2 does not initialize memory for an unspecified data...

PT-2016-1440

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Firefox ESR versions 38.x prior to 38.7 Description The issue is caused by a buffer overflow in the Machine::Code::decoder::analysis::set ref function. This can be...

PT-2016-1426

Name of the Vulnerable Software and Affected Versions Graphite 2 versions prior to 1.3.6 Mozilla Firefox versions prior to 45.0 Mozilla Firefox ESR 38.x versions prior to 38.7 Description The issue is caused by a buffer overflow in the CachedCmap.cpp component of Graphite 2, a rendering tool used...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2016:0554-1)

This update for MozillaFirefox fixes the following issues : - update to Firefox 38.6.1 ESR bsc967087 - MFSA 2016-14/CVE-2016-1523 bmo1246093 Vulnerabilities in Graphite 2 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED11 / SLES11 Security Update : MozillaFirefox (SUSE-SU-2016:0564-1)

This update for MozillaFirefox fixes the following issues : - update to Firefox 38.6.1 ESR bsc967087 - MFSA 2016-14/CVE-2016-1523 bmo1246093 Vulnerabilities in Graphite 2 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2016:0554-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...