CVE-2017-5436 in Firefox
要約 (英語)
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
予約する
2017年01月13日
公開
2018年06月11日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 100291 | Mozilla Firefox Graphite2 メモリ破損 | 787 | 未定義 | 公式な修正 | CVE-2017-5436 |