Description
The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before
1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before
38.7, allows remote attackers to cause a denial of service (buffer
over-read) or possibly have unspecified other impact via a crafted Graphite
smart font, a different vulnerability than CVE-2016-2792.
Assigned-to
chrisccoulson
Package
| Upstream: | released
(45.0)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was released [45.0+build2-0ubuntu0.12.04.1])
|
| Ubuntu 14.04 ESM (Trusty Tahr): | DNE
(trusty was released [45.0+build2-0ubuntu0.14.04.1])
|
| Ubuntu 16.04 LTS (Xenial Xerus): | not-affected
(45.0+build2-0ubuntu1)
|
Package
| Upstream: | released
(1.3.6-1)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was needed)
|
| Ubuntu 14.04 ESM (Trusty Tahr): | released
(1.3.6-1ubuntu0.14.04.1)
|
| Ubuntu 16.04 LTS (Xenial Xerus): | released
(1.3.6-1ubuntu1)
|
Package
| Upstream: | released
(38.7)
|
| Ubuntu 12.04 ESM (Precise Pangolin): | DNE
(precise was released [1:38.7.2+build1-0ubuntu0.12.04.1])
|
| Ubuntu 14.04 ESM (Trusty Tahr): | DNE
(trusty was released [1:38.7.2+build1-0ubuntu0.14.04.1])
|
| Ubuntu 16.04 LTS (Xenial Xerus): | released
(1:38.7.2+build1-0ubuntu0.16.04.1)
|
Updated: 2020-03-18 22:44:10 UTC (commit 2ea7df7bd1e69e1e489978d2724a936eb3faa1b8)