CVE

Id
88341  
CVE No.
CVE-2016-1522  
Status
Candidate  
Description
Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.  
Phase
Assigned (20160107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
766943 88341 CVE-2016-1522 MISC:http://blog.talosintel.com/2016/02/vulnerability-spotlight-libgraphite.html  View
766944 88341 CVE-2016-1522 CONFIRM:http://www.mozilla.org/security/announce/2016/mfsa2016-14.html  View
766945 88341 CVE-2016-1522 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html  View
766946 88341 CVE-2016-1522 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
766947 88341 CVE-2016-1522 DEBIAN:DSA-3479  View
766948 88341 CVE-2016-1522 URL:http://www.debian.org/security/2016/dsa-3479  View
766949 88341 CVE-2016-1522 FEDORA:FEDORA-2016-338a7e9925  View
766950 88341 CVE-2016-1522 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184623.html  View
766951 88341 CVE-2016-1522 FEDORA:FEDORA-2016-4154a4d0ba  View
766952 88341 CVE-2016-1522 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177520.html  View
766953 88341 CVE-2016-1522 REDHAT:RHSA-2016:0594  View
766954 88341 CVE-2016-1522 URL:http://rhn.redhat.com/errata/RHSA-2016-0594.html  View
766955 88341 CVE-2016-1522 REDHAT:RHSA-2016:0197  View
766956 88341 CVE-2016-1522 URL:http://rhn.redhat.com/errata/RHSA-2016-0197.html  View
766957 88341 CVE-2016-1522 REDHAT:RHSA-2016:0258  View
766958 88341 CVE-2016-1522 URL:http://rhn.redhat.com/errata/RHSA-2016-0258.html  View
766959 88341 CVE-2016-1522 SUSE:openSUSE-SU-2016:0791  View
766960 88341 CVE-2016-1522 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00058.html  View
766961 88341 CVE-2016-1522 UBUNTU:USN-2902-1  View
766962 88341 CVE-2016-1522 URL:http://www.ubuntu.com/usn/USN-2902-1  View
766963 88341 CVE-2016-1522 BID:82991  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
2013 JVNDB-2016-002786 Apple iOS および OS X で使用される libxml2 の xmlSAX2AttributeNs 関数におけるサービス運用妨害 (DoS) の脆弱性 Apple iOS および OS X で使用される libxml2 の xmlSAX2AttributeNs 関数には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2016-1835 88341 6.8 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002786.html  View