PT-2017-17937 · Mozilla+5 · Firefox+6

Publicado

2017-05-29

·

Atualizado

2019-04-15

·

CVE-2017-7776

CVSS v3.1

8.1

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 54
Description A heap-based buffer overflow read issue exists in the Graphite2 library. The problem is located in the graphite2::Silf::getClassGlyph() function.
Recommendations For Firefox versions prior to 54, update to version 54 or later to resolve the issue.

Exploit

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2017-1665
ALT-PU-2017-1886
ALT-PU-2018-1854
CESA-2017_1440
CESA-2017_1561
CESA-2017_1793
CVE-2017-7776
DLA-1007-1
DLA-1013-1
DLA-991-1
DSA-3881-1
DSA-3894-1
DSA-3918-1
MGASA-2017-0178
MGASA-2017-0217
OPENSUSE-SU-2017:1579-1
OPENSUSE-SU-2017_1620-1
RHSA-2017:1440
RHSA-2017:1561
RHSA-2017:1793
RHSA-2017_1440
RHSA-2017_1561
RHSA-2017_1793
USN-3315-1
USN-3321-1
USN-3398-1

Produtos afetados

Alt Linux
Centos
Firefox
Graphite 2
Red Hat
Suse
Ubuntu