CVE-2016-2799: Buffer Overflow
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2799?
CVE-2016-2799 has a severity rating that indicates it can lead to denial of service attacks.
How do I fix CVE-2016-2799?
To fix CVE-2016-2799, update to the patched versions of Graphite2, Mozilla Firefox, or Firefox ESR as applicable.
What systems are affected by CVE-2016-2799?
CVE-2016-2799 affects various versions of Mozilla Firefox, Firefox ESR, and Graphite2 across multiple operating systems, including Oracle Linux and openSUSE.
Can CVE-2016-2799 be exploited remotely?
Yes, CVE-2016-2799 can be exploited remotely through crafted Graphite smart fonts.
What happens if I do not mitigate CVE-2016-2799?
If CVE-2016-2799 is not mitigated, it may allow attackers to cause denial of service or potentially other unspecified impacts.