NVD

Id
18059  
Name
CVE-2016-1709  
Description
Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-07-23  
Modified Date
2016-11-28  
Seq
2016-1709  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
99442 18059 CVE-2016-1709 http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html  View
99443 18059 CVE-2016-1709 openSUSE-SU-2016:1865  View
99444 18059 CVE-2016-1709 openSUSE-SU-2016:1868  View
99445 18059 CVE-2016-1709 openSUSE-SU-2016:1869  View
99446 18059 CVE-2016-1709 openSUSE-SU-2016:1918  View
99447 18059 CVE-2016-1709 RHSA-2016:1485  View
99448 18059 CVE-2016-1709 DSA-3637  View
99449 18059 CVE-2016-1709 92053  View
99450 18059 CVE-2016-1709 https://crbug.com/614934  View
99451 18059 CVE-2016-1709 https://github.com/googlei18n/sfntly/commit/468cad540fa1b0027cad60456f53feabecdce2bc  View
99452 18059 CVE-2016-1709 https://github.com/googlei18n/sfntly/commit/c56b85408bab232efd7e650f0994272a174e3b92  View
99453 18059 CVE-2016-1709 https://github.com/googlei18n/sfntly/pull/56  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3227 JVNDB-2016-004000 Google Chrome で使用される Google sfntly の data/byte_array.cc におけるヒープベースのバッファオーバーフローの脆弱性 Google Chrome で使用される Google sfntly の data/byte_array.cc の ByteArray::Get メソッドには、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2016-1709 88215 CVE-2016-1709 18059 6.8 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004000.html 2016-07-20 2016-07-28 View