PT-2016-2656 · Google+4 · Google Chrome+5

Leizleiz · Published 2016-07-20 · Updated 2024-06-15 · CVE-2016-1709

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google sfntly versions prior to 2016-06-10 Google Chrome versions prior to 52.0.2743.82

Description The issue is a heap-based buffer overflow in the ByteArray::Get method, which can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. This is achieved through a crafted SFNT font. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Google sfntly versions prior to 2016-06-10, update to a version released after 2016-06-10 to resolve the issue. For Google Chrome versions prior to 52.0.2743.82, update to version 52.0.2743.82 or later to resolve the issue. As a temporary workaround, consider restricting the use of SFNT fonts in affected applications until a patch is available.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2016-2194

BDU:2016-02048

CVE-2016-1709

DSA-3637-1

MGASA-2016-0274

OPENSUSE-SU-2016:1868-1

OPENSUSE-SU-2016:1869-1

OPENSUSE-SU-2016_1865-1

OPENSUSE-SU-2016_1869-1

OPENSUSE-SU-2016_1918-1

OPENSUSE-SU-2024:10171-1

OPENSUSE-SU-2024:12948-1

RHSA-2016:1485

RHSA-2016_1485

Affected Products

Alt Linux

Google Chrome

Opera

Red Hat

Suse

Sfntly

References · 2364

• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1709 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1709 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-1709 · Security Note
• https://ubuntu.com/security/CVE-2016-1709 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2016:1869-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10171-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3637-1 · Vendor Advisory
• http://debian.org/security/2016/dsa-3637 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-1709 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-02048 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html · Vendor Advisory