9.8

CVE-2017-7778

A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version < 52.2.0
Mozilla ≫ Firefox Version < 54.0
Mozilla ≫ Thunderbird Version < 52.2.0
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Sil ≫ Graphite2 Version < 1.3.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.22% 0.914
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

http://www.securitytracker.com/id/1038689
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1440
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1561
Third Party Advisory
https://www.debian.org/security/2017/dsa-3881
Third Party Advisory
https://www.debian.org/security/2017/dsa-3918
Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2017-15/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-16/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-17/
Vendor Advisory
http://www.securityfocus.com/bid/99057
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1793
Third Party Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1349310
Vendor Advisory
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1350047
Vendor Advisory
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1352745
Vendor Advisory
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1352747
Vendor Advisory
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1355174
Vendor Advisory
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1355182
Vendor Advisory
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1356607
Vendor Advisory
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1358551
Vendor Advisory
Issue Tracking
https://security.gentoo.org/glsa/201710-13
Third Party Advisory
https://www.debian.org/security/2017/dsa-3894
Third Party Advisory