Summary
It was discovered that graphite2 incorrectly handled certain malformed
fonts. If a user or automated system were tricked into opening a specially-
crafted font file, a remote attacker could use this issue to cause
graphite2 to crash, resulting in a denial of service, or possibly execute
arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | graphite2 | 1.3.6-1ubuntu0.14.04.1 |
Vulnerabilities 14
-
Unscored —
The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45…
-
Unscored —
The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Fi…
-
Unscored —
The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefo…
-
Unscored —
The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 an…
-
Unscored —
CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, all…
-
Unscored —
The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox bef…
-
Unscored —
The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and F…
-
Unscored —
Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mo…
-
Unscored —
The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.…
-
Unscored —
The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 a…
-
Unscored —
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Fire…
-
Unscored —
The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 an…
-
Unscored —
The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Fir…
-
Unscored —
The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox befo…
References
-
report
https://ubuntu.com/security/CVE-2016-1977
-
report
https://ubuntu.com/security/CVE-2016-2790
-
report
https://ubuntu.com/security/CVE-2016-2791
-
report
https://ubuntu.com/security/CVE-2016-2792
-
report
https://ubuntu.com/security/CVE-2016-2793
-
report
https://ubuntu.com/security/CVE-2016-2794
-
report
https://ubuntu.com/security/CVE-2016-2795
-
report
https://ubuntu.com/security/CVE-2016-2796
-
report
https://ubuntu.com/security/CVE-2016-2797
-
report
https://ubuntu.com/security/CVE-2016-2798
-
report
https://ubuntu.com/security/CVE-2016-2799
-
report
https://ubuntu.com/security/CVE-2016-2800
-
report
https://ubuntu.com/security/CVE-2016-2801
-
report
https://ubuntu.com/security/CVE-2016-2802