Логотип exploitDog
bind:CVE-2016-1522
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2016-1522

Количество 8

Количество 8

ubuntu логотип

CVE-2016-1522

больше 9 лет назад

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

CVSS3: 8.8
EPSS: Низкий
redhat логотип

CVE-2016-1522

больше 9 лет назад

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

CVSS2: 6.8
EPSS: Низкий
nvd логотип

CVE-2016-1522

больше 9 лет назад

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2016-1522

больше 9 лет назад

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefo ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-g9c3-vp28-w6w3

больше 3 лет назад

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

CVSS3: 8.8
EPSS: Низкий
fstec логотип

BDU:2016-00574

больше 9 лет назад

Уязвимость браузера Firefox ESR, программного средства рендеринга Graphite 2, почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

CVSS2: 9.3
EPSS: Низкий
oracle-oval логотип

ELSA-2016-0197

больше 9 лет назад

ELSA-2016-0197: firefox security update (CRITICAL)

EPSS: Низкий
oracle-oval логотип

ELSA-2016-0594

больше 9 лет назад

ELSA-2016-0594: graphite2 security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2016-1522

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

CVSS3: 8.8
2%
Низкий
больше 9 лет назад
redhat логотип
CVE-2016-1522

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

CVSS2: 6.8
2%
Низкий
больше 9 лет назад
nvd логотип
CVE-2016-1522

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

CVSS3: 8.8
2%
Низкий
больше 9 лет назад
debian логотип
CVE-2016-1522

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefo ...

CVSS3: 8.8
2%
Низкий
больше 9 лет назад
github логотип
GHSA-g9c3-vp28-w6w3

Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.

CVSS3: 8.8
2%
Низкий
больше 3 лет назад
fstec логотип
BDU:2016-00574

Уязвимость браузера Firefox ESR, программного средства рендеринга Graphite 2, почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

CVSS2: 9.3
2%
Низкий
больше 9 лет назад
oracle-oval логотип
ELSA-2016-0197

ELSA-2016-0197: firefox security update (CRITICAL)

больше 9 лет назад
oracle-oval логотип
ELSA-2016-0594

ELSA-2016-0594: graphite2 security, bug fix, and enhancement update (IMPORTANT)

больше 9 лет назад

Уязвимостей на страницу