CVE-2016-2052
CVE-2016-2052
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947.
CVSS 7.6 · Alta · EPSS 1,0% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
harfbuzz Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.2.6-1
Actualiza a 1.2.6-1
harfbuzz Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.2.6-1
Actualiza a 1.2.6-1
harfbuzz Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.2.6-1
Actualiza a 1.2.6-1
chromium-browser Ubuntu:14.04:LTS
- Versiones
- 29.0.1547.65-0ubuntu2
- 31.0.1650.63-0ubuntu1~20131204.1
- 32.0.1700.107-0ubuntu1~20140204.977.1
- 33.0.1750.152-0ubuntu1~pkg995.1
- 34.0.1847.116-0ubuntu2
- 36.0.1985.125-0ubuntu1.14.04.0~pkg1029
- 37.0.2062.94-0ubuntu0.14.04.1~pkg1042
- 37.0.2062.120-0ubuntu0.14.04.1~pkg1049
- 38.0.2125.111-0ubuntu0.14.04.1.1061
- 39.0.2171.65-0ubuntu0.14.04.1.1064
- 40.0.2214.94-0ubuntu0.14.04.1.1068
- 40.0.2214.111-0ubuntu0.14.04.1.1069
- 41.0.2272.76-0ubuntu0.14.04.1.1076
- 43.0.2357.81-0ubuntu0.14.04.1.1089
- 43.0.2357.130-0ubuntu0.14.04.1.1092
- 44.0.2403.89-0ubuntu0.14.04.1.1095
- 45.0.2454.85-0ubuntu0.14.04.1.1097
- 45.0.2454.101-0ubuntu0.14.04.1.1099
- 47.0.2526.73-0ubuntu0.14.04.1.1106
- 47.0.2526.106-0ubuntu0.14.04.1.1107
- 48.0.2564.82-0ubuntu0.14.04.1.1108
- Intervalos de versiones afectados
- ECOSYSTEM: < 48.0.2564.116-0ubuntu0.14.04.1.1111
Actualiza a 48.0.2564.116-0ubuntu0.14.04.1.1111
oxide-qt Ubuntu:14.04:LTS
- Versiones
- 1.0.0~bzr437-0ubuntu1
- 1.0.0~bzr452-0ubuntu1
- 1.0.0~bzr475-0ubuntu1
- 1.0.0~bzr490-0ubuntu1
- 1.0.0~bzr501-0ubuntu1
- 1.0.0~bzr501-0ubuntu2
- 1.0.4-0ubuntu0.14.04.1
- 1.0.5-0ubuntu0.14.04.1
- 1.1.2-0ubuntu0.14.04.1
- 1.2.5-0ubuntu0.14.04.1
- 1.3.4-0ubuntu0.14.04.1
- 1.4.2-0ubuntu0.14.04.1
- 1.4.3-0ubuntu0.14.04.1
- 1.5.5-0ubuntu0.14.04.3
- 1.5.6-0ubuntu0.14.04.2
- 1.6.5-0ubuntu0.14.04.1
- 1.6.6-0ubuntu0.14.04.1
- 1.7.8-0ubuntu0.14.04.1
- 1.7.9-0ubuntu0.14.04.1
- 1.8.4-0ubuntu0.14.04.2
- 1.9.1-0ubuntu0.14.04.2
- 1.9.5-0ubuntu0.14.04.1
- 1.10.3-0ubuntu0.14.04.1
- 1.11.3-0ubuntu0.14.04.1
- 1.11.4-0ubuntu0.14.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.12.5-0ubuntu0.14.04.1
Actualiza a 1.12.5-0ubuntu0.14.04.1
chromium-browser Ubuntu:16.04:LTS
- Versiones
- 45.0.2454.101-0ubuntu1.1201
- 47.0.2526.73-0ubuntu1.1218
- 47.0.2526.106-0ubuntu1.1221
- Intervalos de versiones afectados
- ECOSYSTEM: < 48.0.2564.82-0ubuntu1.1222
Actualiza a 48.0.2564.82-0ubuntu1.1222
harfbuzz Ubuntu:16.04:LTS
- Versiones
- 1.0.1-1build2
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.0.1-1ubuntu0.1
Actualiza a 1.0.1-1ubuntu0.1
oxide-qt Ubuntu:16.04:LTS
- Versiones
- 1.9.5-0ubuntu1
- 1.10.3-0ubuntu0.15.10.1
- 1.10.3-0ubuntu0.15.10.2
- 1.11.3-0ubuntu3
- 1.11.4-0ubuntu1
- 1.11.5-0ubuntu1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.12.5-0ubuntu1
Actualiza a 1.12.5-0ubuntu1
Fuentes originales
- https://code.google.com/p/chromium/issues/detail?id=544270
- https://code.google.com/p/chromium/issues/detail?id=579625
- http://rhn.redhat.com/errata/RHSA-2016-0072.html
- https://security.gentoo.org/glsa/201701-76
- http://www.ubuntu.com/usn/USN-2877-1
- http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html
- http://www.securitytracker.com/id/1034801
- http://www.securityfocus.com/bid/81812
- https://github.com/behdad/harfbuzz/issues/139#issuecomment-148289957
- http://www.ubuntu.com/usn/USN-3067-1
- https://github.com/behdad/harfbuzz/commit/63ef0b41dc48d6112d1918c1b1de9de8ea90adb5
- http://lists.opensuse.org/opensuse-updates/2016-08/msg00070.html
- https://nvd.nist.gov/vuln/detail/CVE-2016-2052