Summary
Holger Fuhrmannek and Tyson Smith discovered that graphite2 incorrectly
handled certain malformed fonts. If a user or automated system were tricked
into opening a specially-crafted font file, a remote attacker could use
this issue to cause graphite2 to crash, resulting in a denial of service,
or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | graphite2 | 1.3.10-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | graphite2 | 1.3.10-0ubuntu0.16.04.1 |
Vulnerabilities 8
-
Unscored —
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.
-
Unscored —
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.
-
Unscored —
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
-
Unscored —
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
-
Unscored —CVE-2017-7775 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
-
Unscored —
Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
-
Unscored —
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph func…
-
Unscored —
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and…
References
-
report
https://ubuntu.com/security/CVE-2017-7771
-
report
https://ubuntu.com/security/CVE-2017-7772
-
report
https://ubuntu.com/security/CVE-2017-7773
-
report
https://ubuntu.com/security/CVE-2017-7774
-
report
https://ubuntu.com/security/CVE-2017-7775
-
report
https://ubuntu.com/security/CVE-2017-7776
-
report
https://ubuntu.com/security/CVE-2017-7777
-
report
https://ubuntu.com/security/CVE-2017-7778