CVE-2016-2799

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 4.9% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2798

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2797

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2801.

CVSS 3.0 · 8.8 High EPSS 2.7% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2796

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 3.9% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2795

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2794

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 3.5% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2793

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.7% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2792

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2800.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2791

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2790

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-1979

nss: Use-after-free during processing of DER encoded keys in NSS (MFSA 2016-36)

Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndReturnKey function in Mozilla Network Security Services (NSS) before 3.21.1, as used in Mozilla Firefox before 45.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted key data with DER encoding.

CVSS 3.0 · 8.8 High EPSS 2.2% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Network Security Services Enterprise Linux

CVE-2016-1978

nss: Use-after-free in NSS during SSL connections in low memory (MFSA 2016-15)

Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, allows remote attackers to cause a denial of service or possibly have unspecified other impact by making an SSL (1) DHE or (2) ECDHE handshake at a time of high memory consumption.

CVSS 3.0 · 7.3 High EPSS 2.4% KEV · Not listed

Vendors

Mozilla Redhat

Products

Firefox Network Security Services Enterprise Linux

CVE-2016-1977

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-1976

Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)

Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed

Vendors

Microsoft Mozilla Webrtc Project

Products

Windows Firefox Webrtc

CVE-2016-1975

Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)

Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 6.3 Medium EPSS 1.2% KEV · Not listed

Vendors

Mozilla Webrtc Project

Products

Firefox Webrtc

CVE-2016-1974

Mozilla: Out-of-bounds read in HTML parser following a failed allocation (MFSA 2016-34)

The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via crafted Unicode data in an HTML, XML, or SVG document.

CVSS 3.0 · 8.8 High EPSS 3.0% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 2 more

Products

Firefox Thunderbird Leap and 4 more

CVE-2016-1973

Mozilla: Use-after-free in GetStaticInstance in WebRTC (MFSA 2016-33)

Race condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox before 45.0 might allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via unspecified vectors.

CVSS 3.0 · 8.8 High EPSS 3.0% KEV · Not listed

Vendors

Mozilla Oracle Redhat

Products

Firefox Linux Enterprise Linux

CVE-2016-1972

Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)

Race condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.9% KEV · Not listed

Vendors

Microsoft Mozilla

Products

Windows Firefox

CVE-2016-1971

Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)

The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status check, which might allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.7% KEV · Not listed

Vendors

Microsoft Mozilla

Products

Windows Firefox

CVE-2016-1970

Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)

Integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.7% KEV · Not listed

Vendors

Microsoft Mozilla

Products

Windows Firefox