CVE-2016-2796 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer9 documents7 sources

Severity

8.8HIGHNVD

EPSS

0.6%

top 31.54%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SIL Graphite2 Mozilla Firefox Opensuse Leap +3 more

Timeline

PublishedMar 13

Latest updateMay 13

Description

Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages6 packages

▶Debiansil/graphite2< 1.3.6-1+3

▶NVDsil/graphite21.3.5

▶NVDmozilla/firefox44.0.2+13

▶NVDoracle/linux5.0, 6, 7+2

▶NVDopensuse/leap42.1

Also affects: Linux Enterprise 12.0

🔴Vulnerability Details

GHSA

GHSA-wrvv-xmm6-v84h: Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1↗2022-05-13

▶

OSV

CVE-2016-2796: Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1↗2016-03-13

▶

CVEList

CVE-2016-2796: Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1↗2016-03-13

▶

📋Vendor Advisories

Ubuntu

Thunderbird vulnerabilities↗2016-04-27

▶

Ubuntu

graphite2 vulnerabilities↗2016-03-14

▶

Ubuntu

Firefox vulnerabilities↗2016-03-09

▶

Red Hat

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)↗2016-03-08

▶

Debian

CVE-2016-2796: firefox - Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in...↗2016

▶