ByteOS Network

CVE Vulnerability Details :

CVE-2016-1522

PUBLISHED

More Info Official Page

Assigner-certcc

Assigner Org ID-37e5125f-f79b-445b-8fad-9564f167944b

Published At-13 Feb, 2016 | 02:00

Updated At-05 Aug, 2024 | 23:02

▼CVE Numbering Authority (CNA)

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://security.gentoo.org/glsa/201701-35	vendor-advisory x_refsource_GENTOO
http://www.securityfocus.com/bid/82991	vdb-entry x_refsource_BID
http://www.ubuntu.com/usn/USN-2902-1	vendor-advisory x_refsource_UBUNTU
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-0594.html	vendor-advisory x_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html	vendor-advisory x_refsource_SUSE
http://www.debian.org/security/2016/dsa-3479	vendor-advisory x_refsource_DEBIAN
http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html	x_refsource_MISC
http://rhn.redhat.com/errata/RHSA-2016-0258.html	vendor-advisory x_refsource_REDHAT
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html	vendor-advisory x_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-0197.html	vendor-advisory x_refsource_REDHAT
https://security.gentoo.org/glsa/201701-63	vendor-advisory x_refsource_GENTOO
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html	vendor-advisory x_refsource_FEDORA
http://www.mozilla.org/security/announce/2016/mfsa2016-14.html	x_refsource_CONFIRM

Hyperlink: https://security.gentoo.org/glsa/201701-35

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.securityfocus.com/bid/82991

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.ubuntu.com/usn/USN-2902-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-0594.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.debian.org/security/2016/dsa-3479

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html

Resource:

x_refsource_MISC

Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-0258.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://rhn.redhat.com/errata/RHSA-2016-0197.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://security.gentoo.org/glsa/201701-63

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.mozilla.org/security/announce/2016/mfsa2016-14.html

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://security.gentoo.org/glsa/201701-35	vendor-advisory x_refsource_GENTOO x_transferred
http://www.securityfocus.com/bid/82991	vdb-entry x_refsource_BID x_transferred
http://www.ubuntu.com/usn/USN-2902-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html	x_refsource_CONFIRM x_transferred
http://rhn.redhat.com/errata/RHSA-2016-0594.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM x_transferred
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.debian.org/security/2016/dsa-3479	vendor-advisory x_refsource_DEBIAN x_transferred
http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html	x_refsource_MISC x_transferred
http://rhn.redhat.com/errata/RHSA-2016-0258.html	vendor-advisory x_refsource_REDHAT x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html	vendor-advisory x_refsource_FEDORA x_transferred
http://rhn.redhat.com/errata/RHSA-2016-0197.html	vendor-advisory x_refsource_REDHAT x_transferred
https://security.gentoo.org/glsa/201701-63	vendor-advisory x_refsource_GENTOO x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.mozilla.org/security/announce/2016/mfsa2016-14.html	x_refsource_CONFIRM x_transferred