CVE-2016-1977 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer9 documents7 sources

Severity

8.8HIGHNVD

EPSS

0.7%

top 27.93%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SIL Graphite2 Mozilla Firefox Opensuse Leap +3 more

Timeline

PublishedMar 13

Latest updateMay 13

Description

The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted Graphite smart font.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages6 packages

▶NVDmozilla/firefox44.0.2+13

▶Debiansil/graphite2< 1.3.6-1+3

▶NVDsil/graphite21.3.5

▶NVDoracle/linux5.0, 6, 7+2

▶NVDopensuse/leap42.1

Also affects: Linux Enterprise 12.0

🔴Vulnerability Details

GHSA

GHSA-7f72-9cfh-wr9m: The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1↗2022-05-13

▶

CVEList

CVE-2016-1977: The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1↗2016-03-13

▶

OSV

CVE-2016-1977: The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1↗2016-03-13

▶

📋Vendor Advisories

Ubuntu

Thunderbird vulnerabilities↗2016-04-27

▶

Ubuntu

graphite2 vulnerabilities↗2016-03-14

▶

Ubuntu

Firefox vulnerabilities↗2016-03-09

▶

Red Hat

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)↗2016-03-08

▶

Debian

CVE-2016-1977: firefox - The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3....↗2016

▶