Vulnerability CVE-2016-2802

Vulnerability CVE-2016-2802

Published: 2016-03-13

Description:

The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.8/10	6.4/10	8.6/10

Exploit range	Attack complexity	Authentication
Remote	Medium	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
SUSE -> Linux enterprise
SIL -> Graphite2
Oracle -> Linux
Opensuse -> LEAP
Opensuse -> Opensuse
Novell -> Opensuse
Novell -> LEAP
Mozilla -> Firefox
Mozilla -> Firefox esr

References:

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00089.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00091.html

http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00008.html

http://www.debian.org/security/2016/dsa-3510

http://www.debian.org/security/2016/dsa-3515

http://www.debian.org/security/2016/dsa-3520

http://www.mozilla.org/security/announce/2016/mfsa2016-37.html

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

http://www.securityfocus.com/bid/84222

http://www.securitytracker.com/id/1035215

http://www.ubuntu.com/usn/USN-2917-1

http://www.ubuntu.com/usn/USN-2917-2

http://www.ubuntu.com/usn/USN-2917-3

http://www.ubuntu.com/usn/USN-2927-1

http://www.ubuntu.com/usn/USN-2934-1

https://bugzilla.mozilla.org/show_bug.cgi?id=1248804

https://security.gentoo.org/glsa/201605-06

https://security.gentoo.org/glsa/201701-63

Vulnerability CVE-2016-2802

CWE-119

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

6.8/10

6.4/10

8.6/10

Remote

Medium

No required

Partial

Partial

Partial

Affected software

References: