Published: 19/07/2016 Updated: 05/01/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 7.6 | Impact Score: 4.7 | Exploitability Score: 2.8

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

hb-ot-layout-gpos-table.hh in HarfBuzz prior to 1.0.5 allows remote malicious users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052.

Vulnerable Product	Search on Vulmon	Subscribe to Product
harfbuzz project harfbuzz

HarfBuzz could be made to crash or run programs as your login if it processed specially crafted data ...

hb-ot-layout-gpos-tablehh in HarfBuzz before 105 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vulnerability than CVE-2016-2052 ...

CWE-119 https://github.com/behdad/harfbuzz/commit/f96664974774bfeb237a7274f512f64aaafb201e https://github.com/behdad/harfbuzz/issues/139#issuecomment-146984679 http://www.ubuntu.com/usn/USN-3067-1 http://www.securityfocus.com/bid/92039 http://lists.opensuse.org/opensuse-updates/2016-08/msg00070.html https://security.gentoo.org/glsa/201701-76 http://rhn.redhat.com/errata/RHSA-2016-0072.html https://lists.debian.org/debian-lts-announce/2019/12/msg00022.html https://usn.ubuntu.com/3067-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-8947

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect