p PatchFirst

CVE-2016-1523

CVE-2016-1523

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.

CVSS 6.5 · Medium · EPSS 2.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • graphite2 Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.3.5-1

    Update to 1.3.5-1

  • graphite2 Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.3.5-1

    Update to 1.3.5-1

  • graphite2 Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.3.5-1

    Update to 1.3.5-1

  • graphite2 Ubuntu:14.04:LTS

    Versions
    • 1.2.3-1
    • 1.2.4-1
    • 1.2.4-1ubuntu1
    Affected ranges
    • ECOSYSTEM: < 1.2.4-1ubuntu1.1

    Update to 1.2.4-1ubuntu1.1

  • thunderbird Ubuntu:14.04:LTS

    Versions
    • 1:24.0+build1-0ubuntu1
    • 1:24.0+build1-0ubuntu2
    • 1:24.1.1+build1-0ubuntu0.13.10.1
    • 1:24.1.1+build1-0ubuntu1
    • 1:24.2.0+build1-0ubuntu1
    • 1:24.4.0+build1-0ubuntu1
    • 1:24.5.0+build1-0ubuntu0.14.04.1
    • 1:24.6.0+build1-0ubuntu0.14.04.1
    • 1:31.0+build1-0ubuntu0.14.04.1
    • 1:31.1.1+build1-0ubuntu0.14.04.1
    • 1:31.1.2+build1-0ubuntu0.14.04.1
    • 1:31.2.0+build2-0ubuntu0.14.04.1
    • 1:31.3.0+build1-0ubuntu0.14.04.1
    • 1:31.4.0+build1-0ubuntu0.14.04.1
    • 1:31.5.0+build1-0ubuntu0.14.04.1
    • 1:31.6.0+build1-0ubuntu0.14.04.1
    • 1:31.7.0+build1-0ubuntu0.14.04.1
    • 1:31.8.0+build1-0ubuntu0.14.04.1
    • 1:38.2.0+build1-0ubuntu0.14.04.1
    • 1:38.3.0+build1-0ubuntu0.14.04.1
    • 1:38.4.0+build3-0ubuntu0.14.04.1
    • 1:38.5.1+build2-0ubuntu0.14.04.1
    Affected ranges
    • ECOSYSTEM: < 1:38.6.0+build1-0ubuntu0.14.04.1

    Update to 1:38.6.0+build1-0ubuntu0.14.04.1

  • graphite2 Ubuntu:16.04:LTS

    Versions
    • 1.2.4-3ubuntu1
    Affected ranges
    • ECOSYSTEM: < 1.3.5-1ubuntu1

    Update to 1.3.5-1ubuntu1

  • thunderbird Ubuntu:16.04:LTS

    Versions
    • 1:38.3.0+build1-0ubuntu2
    • 1:38.5.1+build2-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 1:38.6.0+build1-0ubuntu1

    Update to 1:38.6.0+build1-0ubuntu1

Original sources

Check your server →