Поиск уязвимостей
Количество 14
Количество 14
GHSA-765v-rgjj-3mrx
The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
CVE-2016-1521
The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
CVE-2016-1521
The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
CVE-2016-1521
The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
CVE-2016-1521
The directrun function in directmachine.cpp in Libgraphite in Graphite ...
BDU:2016-00573
Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании, получить конфиденциальную информацию или выполнить произвольный код
openSUSE-SU-2016:0875-1
Security update for graphite2
SUSE-SU-2016:0779-1
Security update for graphite2
ELSA-2016-0197
ELSA-2016-0197: firefox security update (CRITICAL)
ELSA-2016-0594
ELSA-2016-0594: graphite2 security, bug fix, and enhancement update (IMPORTANT)
ALT-PU-2016-1136
ALT-PU-2016-1136: package `thunderbird` update to version 38.6.0-alt1
ALT-PU-2016-1130
ALT-PU-2016-1130: package `libgraphite2` update to version 1.3.5-alt1
ALT-PU-2015-2196
ALT-PU-2015-2196: package `firefox` update to version 43.0.1-alt1
ALT-PU-2016-1454
ALT-PU-2016-1454: package `firefox-esr` update to version 45.1.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-765v-rgjj-3mrx The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font. | CVSS3: 8.8 | 4% Низкий | больше 4 лет назад |
 | CVE-2016-1521 The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font. | CVSS3: 8.8 | 4% Низкий | больше 10 лет назад |
 | CVE-2016-1521 The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font. | CVSS2: 6.8 | 4% Низкий | почти 11 лет назад |
 | CVE-2016-1521 The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font. | CVSS3: 8.8 | 4% Низкий | больше 10 лет назад |
| CVE-2016-1521 The directrun function in directmachine.cpp in Libgraphite in Graphite ... | CVSS3: 8.8 | 4% Низкий | больше 10 лет назад |
 | BDU:2016-00573 Уязвимость браузеров Firefox ESR и Firefox, программного средства рендеринга Graphite 2, почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании, получить конфиденциальную информацию или выполнить произвольный код | CVSS2: 9.3 | 4% Низкий | больше 10 лет назад |
 | openSUSE-SU-2016:0875-1 Security update for graphite2 | больше 10 лет назад | ||
| SUSE-SU-2016:0779-1 Security update for graphite2 | больше 10 лет назад | ||
| ELSA-2016-0197 ELSA-2016-0197: firefox security update (CRITICAL) | больше 10 лет назад | ||
| ELSA-2016-0594 ELSA-2016-0594: graphite2 security, bug fix, and enhancement update (IMPORTANT) | больше 10 лет назад | ||
| ALT-PU-2016-1136 ALT-PU-2016-1136: package `thunderbird` update to version 38.6.0-alt1 | CVSS3: 8.8 | больше 10 лет назад | |
| ALT-PU-2016-1130 ALT-PU-2016-1130: package `libgraphite2` update to version 1.3.5-alt1 | CVSS3: 8.8 | больше 10 лет назад | |
| ALT-PU-2015-2196 ALT-PU-2015-2196: package `firefox` update to version 43.0.1-alt1 | CVSS3: 8.8 | почти 11 лет назад | |
| ALT-PU-2016-1454 ALT-PU-2016-1454: package `firefox-esr` update to version 45.1.1-alt1 | CVSS3: 10 | больше 10 лет назад |
Уязвимостей на страницу