PT-2016-1278 · Silicon Graphics+6 · Libgraphite+7

Holger Fuhrmannek · Published 2015-06-14 · Updated 2024-10-22 · CVE-2016-1523

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Libgraphite versions 1.2.4 Mozilla Firefox versions prior to 43.0 Firefox ESR versions prior to 38.6.1

Description The issue is related to the SillMap::readFace function in FeatureMap.cpp, which mishandles a return value. This can be exploited by remote attackers using a crafted Graphite smart font, leading to a denial of service, including missing initialization, NULL pointer dereference, and application crash.

Recommendations For Libgraphite version 1.2.4, update to a version that fixes the SillMap::readFace function issue. For Mozilla Firefox versions prior to 43.0, update to version 43.0 or later. For Firefox ESR versions prior to 38.6.1, update to version 38.6.1 or later.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2015-1539

ALT-PU-2016-1101

ALT-PU-2016-1130

ALT-PU-2016-1136

BDU:2016-00575

CESA-2016_0197

CESA-2016_0258

CESA-2016_0594

CVE-2016-1523

DSA-3477-1

DSA-3479-1

DSA-3491-1

MGASA-2016-0077

MGASA-2016-0078

OPENSUSE-SU-2016_0791-1

OPENSUSE-SU-2016_0875-1

RHSA-2016:0197

RHSA-2016:0258

RHSA-2016:0594

RHSA-2016_0197

RHSA-2016_0258

RHSA-2016_0594

SUSE-SU-2016:0554-1

SUSE-SU-2016:0564-1

SUSE-SU-2016:0584-1

SUSE-SU-2016:0779-1

SUSE-SU-2016_0554-1

SUSE-SU-2016_0564-1

USN-2902-1

USN-2904-1

Affected Products

Alt Linux

Centos

Firefox Esr

Libgraphite

Firefox

Red Hat

Suse

Ubuntu

References · 168

• https://osv.dev/vulnerability/SUSE-SU-2016:0554-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1522 · Security Note
• https://ubuntu.com/security/CVE-2016-1523 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2016-1130 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-1523 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-0594.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1930 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2016-1523 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-0197.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-1930 · Vendor Advisory
• https://security.gentoo.org/glsa/201605-06 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-3477-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11311 · Security Note
• https://security-tracker.debian.org/tracker/DSA-3491-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2016-0077 · Vendor Advisory