Lucene search
Veracode Vulnerability DatabaseVERACODE:18088HistoryMay 02, 2019 - 6:12 a.m.
Denial Of Service (DoS)
2019-05-0206:12:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.003
Percentile
71.7%
Mozilla Firefox is vulnerable to heap-based buffer overflow vulnerability. The vulnerability exists in the Graphite component in the decompress() function in Decompressor.cpp due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or the execution of arbitrary code.
Related
cve
cve
CVE-2017-7772
2019-04-12 18:29:00
cvelist
cvelist
CVE-2017-7772
2019-04-12 18:00:34
prion
prion
Heap overflow
2019-04-12 18:29:00
nvd
nvd
CVE-2017-7772
2019-04-12 18:29:00
debiancve
debiancve
CVE-2017-7772
2019-04-12 18:29:00
ubuntucve
ubuntucve
CVE-2017-7772
2017-06-14 00:00:00
osv
osv
CVE-2017-7772
2019-04-12 18:29:00
graphite2 - security update
2017-06-22 00:00:00
graphite2 - security update
2017-07-05 00:00:00
redhatcve
redhatcve
CVE-2017-7772
2017-06-14 04:52:24
nessus
nessus
Debian DLA-1013-1 : graphite2 security update
2017-07-06 00:00:00
Debian DSA-3894-1 : graphite2 - security update
2017-06-23 00:00:00
GLSA-201710-13 : Graphite: Multiple vulnerabilities
2017-10-16 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3894-1)
2017-06-21 00:00:00
Debian: Security Advisory (DLA-1013-1)
2018-02-04 00:00:00
Huawei EulerOS: Security Advisory for graphite2 (EulerOS-SA-2017-1153)
2020-01-23 00:00:00
ubuntu
ubuntu
graphite2 vulnerabilities
2017-08-21 00:00:00
Thunderbird vulnerabilities
2017-07-05 00:00:00
Firefox vulnerabilities
2017-06-15 00:00:00
amazon
amazon
Important: graphite2
2017-08-17 18:27:00
centos
centos
graphite2 security update
2017-07-21 14:21:22
firefox security update
2017-06-15 10:14:10
thunderbird security update
2017-06-21 15:49:22
gentoo
gentoo
Graphite: Multiple vulnerabilities
2017-10-13 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2018-02-20 00:00:00
debian
debian
[SECURITY] [DLA 1013-1] graphite2 security update
2017-07-05 12:16:36
[SECURITY] [DSA 3894-1] graphite2 security update
2017-06-22 17:43:51
[SECURITY] [DSA 3918-1] icedove/thunderbird security update
2017-07-25 20:03:55
oraclelinux
oraclelinux
graphite2 security update
2017-07-20 00:00:00
firefox security update
2017-06-14 00:00:00
thunderbird security update
2017-06-21 00:00:00
ibm
ibm
cloudfoundry
cloudfoundry
USN-3398-1: graphite2 vulnerabilities | Cloud Foundry
2017-09-21 00:00:00
redhat
redhat
(RHSA-2017:1793) Important: graphite2 security update
2017-07-20 22:22:08
(RHSA-2017:1440) Critical: firefox security update
2017-06-14 05:21:03
(RHSA-2017:1561) Important: thunderbird security update
2017-06-21 03:10:17
mageia
mageia
Updated graphite2 packages fix security vulnerabilities
2017-07-26 01:07:12
Updated firefox packages fix security vulnerabilities
2017-06-19 10:44:03
archlinux
archlinux
[ASA-201706-20] thunderbird: multiple issues
2017-06-16 00:00:00
[ASA-201706-19] firefox: multiple issues
2017-06-16 00:00:00
kaspersky
kaspersky
KLA11050 Multiple vulnerabilities in Mozilla Thunderbird
2017-06-14 00:00:00
KLA11044 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR
2017-06-13 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 52.2 — Mozilla
2017-06-14 00:00:00
Security vulnerabilities fixed in Firefox ESR 52.2 — Mozilla
2017-06-13 00:00:00
Security vulnerabilities fixed in Firefox 54 — Mozilla
2017-06-13 00:00:00
suse
suse
Security update for Mozilla based packages (important)
2017-06-20 00:09:32