PT-2016-1279 · Mozilla+5 · Libgraphite+9

Yves Younan · Published 2015-06-14 · Updated 2024-10-22 · CVE-2016-1526

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Graphite 2 versions 1.2.4 and earlier Mozilla Firefox versions prior to 43.0 Mozilla Firefox ESR versions 38.x prior to 38.6.1 Thunderbird (affected versions not specified)

Description The issue is related to the TtfUtil:LocaLookup function in Libgraphite, which lacks protection of internal data. This can be exploited by a remote attacker using a specially crafted Graphite smart font, potentially allowing them to obtain confidential information or cause a denial of service, including out-of-bounds read and application crash.

Recommendations For Graphite 2 version 1.2.4 and earlier, update to a version later than 1.2.4. For Mozilla Firefox versions prior to 43.0, update to version 43.0 or later. For Mozilla Firefox ESR versions 38.x prior to 38.6.1, update to version 38.6.1 or later. For Thunderbird, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Information Disclosure

Buffer Overflow

Weakness Enumeration

CWE-200

CWE-119

Related Identifiers

ALT-PU-2015-1539

ALT-PU-2016-1101

ALT-PU-2016-1130

ALT-PU-2016-1136

BDU:2016-00576

CESA-2016_0594

CESA-2016_0695

CVE-2016-1526

DSA-3477-1

DSA-3479-1

DSA-3491-1

MGASA-2016-0077

MGASA-2016-0078

OPENSUSE-SU-2016_0791-1

OPENSUSE-SU-2016_0875-1

RHSA-2016:0594

RHSA-2016:0695

RHSA-2016_0594

RHSA-2016_0695

SUSE-SU-2016:0779-1

USN-2902-1

Affected Products

Alt Linux

Centos

Graphite 2

Libgraphite

Firefox

Firefox Esr

Red Hat

Suse

Thunderbird

Ubuntu

References · 133

• https://mozilla.org/en-US/security/advisories/mfsa2016-03 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1522 · Security Note
• https://ubuntu.com/security/CVE-2016-1523 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2016-1130 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1526 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2808 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1935 · Security Note
• http://debian.org/security/2016/dsa-3479 · Vendor Advisory
• http://mozilla.org/security/announce/2016/mfsa2016-14.html · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2016-01 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2016-0594.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1521 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2806 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-1526 · Security Note