firefox-38.6.1-1.0.1.AXS4
エラータID: AXSA:2016-107:02
リリース日:
2016/02/18 Thursday - 13:03
題名:
firefox-38.6.1-1.0.1.AXS4
影響のあるチャネル:
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- Mozilla Firefox で使用されている Graphite の Libgraphite の
directmachine.cpp の directrun 関数は，ある skip 操作を検証して
おらず，巧妙に細工された Graphite smart フォントによって，リモー
トの攻撃者が任意のコードを実行する，機密情報を取得する，あるいは
サービス拒否 (境界外からの読み込みとアプリケーションのクラッシュ)
を引き起こす脆弱性があります。(CVE-2016-1521)
- Graphite の Libgraphite の Code.cpp は，サイズチェック中の再帰
ロード呼び出しを考慮しておらず，リモートの攻撃者がサービス拒否 (ヒー
プベースのバッファーオーバーフロー) あるいは任意のコードを実行する
可能性のある脆弱性があります。(CVE-2016-1522)
- Mozilla Firefox で使用されている Graphite の Libgraphite の
FeatureMap.cpp の SillMap::readFace 関数は，返り値を誤って処理し
ており，巧妙に細工された Graphite smart フォントによって，リモー
トの攻撃者がサービス拒否 (初期化の欠落，ヌルポインタデリファレンス，
アプリケーションのクラッシュ) を引き起こす脆弱性があります。
(CVE-2016-1523)
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2016-1521
The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
The directrun function in directmachine.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not validate a certain skip operation, which allows remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font.
CVE-2016-1522
Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.
Code.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, does not consider recursive load calls during a size check, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font.
CVE-2016-1523
The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.
The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Graphite 2 1.2.4, as used in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.6.1, mishandles a return value, which allows remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font.
追加情報:
N/A
ダウンロード:
SRPMS
- firefox-38.6.1-1.0.1.AXS4.src.rpm
MD5: f9c921f0e0d4e43a826dc80ffc45c38c
SHA-256: 74b540bbe53f04ed1acde66c11532ae6a19c59c8956d2806993fda118ee6ee2e
Size: 319.66 MB
Asianux Server 4 for x86
- firefox-38.6.1-1.0.1.AXS4.i686.rpm
MD5: f8215ea62c892b70f0a69ca529a11f72
SHA-256: 40c69b7e99e13f07b9a558f895ed9ec488e8a34d35e3a8ac8f27ef0923883cee
Size: 70.37 MB
Asianux Server 4 for x86_64
- firefox-38.6.1-1.0.1.AXS4.x86_64.rpm
MD5: 53ee4525f45b3a543c239aadab153954
SHA-256: 3fd988b431c1a890e26c0cf9fa06239fd44fb48dc7cfe89fae9070b7f3bcfee2
Size: 69.65 MB - firefox-38.6.1-1.0.1.AXS4.i686.rpm
MD5: f8215ea62c892b70f0a69ca529a11f72
SHA-256: 40c69b7e99e13f07b9a558f895ed9ec488e8a34d35e3a8ac8f27ef0923883cee
Size: 70.37 MB
English