vendor:
Firefox
by:
Project Zero
7,5
CVSS
HIGH
Out-of-Bounds Read
119
CWE
Product Name: Firefox
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2017
Out-of-Bounds Read Vulnerability in Firefox
An out-of-bounds read vulnerability was discovered in Firefox. The vulnerability was confirmed on the nightly ASan build. The vulnerability is caused by a heap-buffer-overflow on address 0x611000721ecc at pc 0x7fcef25af0e8 bp 0x7ffc23afd1b0 sp 0x7ffc23afd1a8 when a READ of size 4 is attempted at 0x611000721ecc. The vulnerability is triggered when the function IsSimpleGlyph in gfxFont.h is called, which is then called by GetAdvanceForGlyph in gfxTextRun.h, which is then called by GetAdvanceForGlyphs in gfxTextRun.cpp, which is then called by gfxTextRun::GetAdvanceWidth in gfxTextRun.cpp, which is then called by nsTextFrame::TrimTrailingWhiteSpace in nsTextFrame.cpp, which is then called by nsTextFrame::Reflow in nsTextFrame.cpp.
Mitigation:
The vulnerability can be mitigated by applying the latest security patches from Mozilla.
