Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-2799 →
DEBIAN-CVE-2016-2799
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
firefox-esr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.0esr-1"}]}]
Debian:13
firefox-esr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.0esr-1"}]}]
Debian:14
firefox-esr
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"45.0esr-1"}]}]
Debian:12
graphite2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1"}]}]
Debian:13
graphite2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1"}]}]
Debian:14
graphite2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6-1"}]}]
Références
- advisory security-tracker.debian.org