PT-2016-1276 · Mozilla+5 · Graphite 2+7

Yves Younan · Published 2015-12-27 · Updated 2024-10-22 · CVE-2016-1521

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Graphite 2 version 1.2.4 Mozilla Firefox versions prior to 43.0 Firefox ESR versions prior to 38.6.1

Description The issue is related to the directrun function in directmachine.cpp, which does not validate a certain skip operation. This allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service via a crafted Graphite smart font, resulting in an out-of-bounds read and application crash.

Recommendations For Graphite 2 version 1.2.4, update to a version that fixes the directrun function issue. For Mozilla Firefox versions prior to 43.0, update to version 43.0 or later. For Firefox ESR versions prior to 38.6.1, update to version 38.6.1 or later.

Exploit

Fix

RCE

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2015-2196

ALT-PU-2016-1130

ALT-PU-2016-1136

ALT-PU-2016-1454

BDU:2016-00573

CESA-2016_0197

CESA-2016_0258

CESA-2016_0594

CVE-2016-1521

DSA-3479-1

MGASA-2016-0077

MGASA-2016-0078

OPENSUSE-SU-2016_0791-1

OPENSUSE-SU-2016_0875-1

OPENSUSE-SU-2024:10242-1

RHSA-2016:0197

RHSA-2016:0258

RHSA-2016:0594

RHSA-2016_0197

RHSA-2016_0258

RHSA-2016_0594

SUSE-SU-2016:0779-1

SUSE-SU-2016_0779-1

USN-2902-1

Affected Products

Alt Linux

Centos

Firefox Esr

Graphite 2

Firefox

Red Hat

Suse

Ubuntu

References · 391

• 🔥 https://github.com/llamakko/CVE-2015-7214 · Exploit
• https://bdu.fstec.ru/vul/2015-12247 · Security Note
• https://bdu.fstec.ru/vul/2016-00765 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1964 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1965 · Security Note
• https://ubuntu.com/security/CVE-2016-1523 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00720 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4495 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-1521 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2016-1130 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7199 · Security Note
• https://bdu.fstec.ru/vul/2016-01153 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2808 · Security Note
• https://bdu.fstec.ru/vul/2015-11248 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1931 · Security Note