CVE-2016-2802: Buffer Overflow
Published Mar 13, 2016
·Updated
The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.
Affected Software
35 affected components
Mozilla Firefox<=44.0.2
Mozilla Firefox=38.0
Mozilla Firefox=38.0.1
Mozilla Firefox=38.0.5
Mozilla Firefox=38.1.0
Mozilla Firefox=38.1.1
Mozilla Firefox=38.2.0
Mozilla Firefox=38.2.1
Mozilla Firefox=38.3.0
Mozilla Firefox=38.4.0
Mozilla Firefox=38.5.0
Mozilla Firefox=38.5.1
Mozilla Firefox=38.6.0
Mozilla Firefox=38.6.1
openSUSE Leap=42.1
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
SUSE Linux Enterprise=12.0
Sil Graphite2<=1.3.5
Oracle Linux=5.0
Oracle Linux=6
Oracle Linux=7
Mozilla Firefox ESR=38.0
Mozilla Firefox ESR=38.0.1
Mozilla Firefox ESR=38.0.5
Mozilla Firefox ESR=38.1.0
Mozilla Firefox ESR=38.1.1
Mozilla Firefox ESR=38.2.0
Mozilla Firefox ESR=38.2.1
Mozilla Firefox ESR=38.3.0
Mozilla Firefox ESR=38.4.0
Mozilla Firefox ESR=38.5.0
Mozilla Firefox ESR=38.5.1
Mozilla Firefox ESR=38.6.0
Mozilla Firefox ESR=38.6.1
Event History
Mar 13, 2016
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description