Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-1709

Опубликовано: 23 июл. 2016
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:sfntly:-:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 51.0.2704.106 (включая)

EPSS

Процентиль: 78%
0.01146
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 9 лет назад

Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.

CVSS3: 8.8
redhat
больше 9 лет назад

Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.

CVSS3: 8.8
debian
больше 9 лет назад

Heap-based buffer overflow in the ByteArray::Get method in data/byte_a ...

CVSS3: 8.8
github
больше 3 лет назад

Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.

fstec
больше 9 лет назад

Уязвимость браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие

EPSS

Процентиль: 78%
0.01146
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119