tocsin

Debian/firefox-esr: high 8.8

An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as

Action: Upgrade firefox-esr to 45.9.0esr-1 or later.

Affected

introducedfixedlast affected
045.9.0esr-1-

Fixed versions

45.9.0esr-1

Sources

published · modified · JSON