{"id":"CVE-2017-7774","aliases":["DEBIAN-CVE-2017-7774","DLA-1007-1","DLA-1013-1","DLA-991-1","DSA-3881-1","DSA-3894-1","DSA-3918-1","EUVD-2017-16749","GHSA-2j49-q898-whm9","MGASA-2017-0178","MGASA-2017-0217","RHSA-2017:1440","RHSA-2017:1561","RHSA-2017:1793","UBUNTU-CVE-2017-7774","USN-3315-1","USN-3321-1","USN-3398-1","openSUSE-SU-2017:1579-1"],"status":"published","title":"Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite...","description":"Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.","severity":{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01419,"percentile":0.7299,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2017-06-14T00:00:00Z","modified":"2026-10-24T10:30:54Z","fixes":[{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["52.2.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["52.2.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["52.2.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"graphite2","fixed_in":["1.3.10-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"graphite2","fixed_in":["1.3.10-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"graphite2","fixed_in":["1.3.10-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"firefox","fixed_in":["54.0+build3-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"graphite2","fixed_in":["1.3.10-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","fixed_in":["1:52.2.1+build1-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"firefox","fixed_in":["54.0+build3-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"graphite2","fixed_in":["1.3.10-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","fixed_in":["1:52.2.1+build1-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"icedove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.2.1-1~deb7u1"}]}],"versions":["10.0.12-1","11.0-1","16.0.2-1","17.0-1","17.0.10-1","17.0.10-1+powerpcspe1","17.0.10-1+powerpcspe2","17.0.10-1~deb7u1","17.0.2-1","17.0.4-1","17.0.5-1","17.0.5-2","17.0.7-1","17.0.7-1~deb7u1","17.0.8-1","17.0.8-1~deb7u1","17.0.9-1","17.0.9-1~deb7u1","17.0.9-2","1:45.0~b4-1","1:45.0~b4-2","1:45.1.0-1","1:45.1.0-1~deb7u1","1:45.1.0-1~deb8u1","1:45.2.0-1","1:45.2.0-1~deb8u1","1:45.2.0-2","1:45.2.0-2~deb7u1","1:45.2.0-3","1:45.2.0-4","1:45.2~b1-1","1:45.3.0-1","1:45.3.0-1~deb7u1","1:45.3.0-1~deb8u1","1:45.4.0-1","1:45.4.0-1~deb7u1","1:45.4.0-1~deb8u1","1:45.5.0-1","1:45.5.1-1","1:45.5.1-1~deb7u1","1:45.5.1-1~deb8u1","1:45.6.0-1","1:45.6.0-1~deb8u1","1:45.6.0-2","1:45.6.0-2~deb7u1","1:45.6.0-3","1:45.7.1-1","1:45.7.1-2","1:45.8.0-1","1:45.8.0-2","1:45.8.0-3","1:45.8.0-3+m68k","1:45.8.0-3+sparc64","1:45.8.0-3~deb7u1","1:45.8.0-3~deb8u1","1:52.1.1-1","1:52.2.0-1","24.0-1","24.0~b3-2","24.1.1-1","24.2.0-1","24.2.0-1+alpha","24.2.0-1+powerpcspe1","24.3.0-1","24.3.0-2","24.4.0-1","24.4.0-1~deb7u1","24.5.0-1","24.5.0-1~deb7u1","24.5.0-2","24.6.0-1~deb7u1","24.7.0-1~deb7u1","24.8.0-1~deb7u1","24.8.1-1~deb7u1","30.0~b1-1","31.0-1","31.0-2","31.0-3","31.0~b1-2","31.0~b2-1","31.1.2-1","31.2.0-1","31.2.0-1~deb7u1","31.3.0-1","31.3.0-1+powerpcspe1","31.3.0-1~deb7u1","31.4.0-1","31.4.0-1~deb7u1","31.4.0-2","31.5.0-1","31.5.0-1~deb7u1","31.6.0-1","31.6.0-1~deb7u1","31.7.0-1","31.7.0-1~deb7u1","31.7.0-1~deb8u1","31.8.0-1~deb7u1","31.8.0-1~deb8u1","31.8.0-1~deb8u1+kbsd11","32.0~b1-1","33.0~b1-1","34.0~b1-1","34.0~b1-2","36.0~b1-1","36.0~b1-2","38.0.1-1","38.0~b2-1","38.0~b5-1","38.1.0-1","38.2.0-1","38.2.0-1~stretch","38.2.0-2","38.3.0-1","38.3.0-1~deb7u1","38.3.0-1~deb8u1","38.3.0-2","38.4.0-1","38.4.0-1~deb7u1","38.4.0-1~deb8u1","38.5.0-1","38.5.0-1~deb7u1","38.5.0-1~deb8u1","38.6.0-1","38.6.0-1~deb7u1","38.6.0-1~deb8u1","38.7.0-1","38.7.0-1~deb7u1","38.7.0-1~deb8u1","38.7.0-1~deb8u2","38.7.0-1~deb8u3","38.7.2-1","38.8.0-1~deb7u1","38.8.0-1~deb7u1.1","38.8.0-1~deb8u1","40.0~b1-1","41.0~b2-1","42.0~b1-1","42.0~b2-1","43.0~b1-1","44.0~b1-1"],"bundled":18},{"source":"osv","ecosystem":"Debian:7","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-1~deb7u1"}]}],"versions":["1.1.3-1","1.1.3-1+powerpcspe1","1.2.0-1","1.2.0-2","1.2.0-3","1.2.0-4","1.2.1-1","1.2.1-2","1.2.1-2+powerpcspe1","1.2.2-1","1.2.2-1+alpha","1.2.2-2","1.2.3-1","1.2.3-1+powerpcspe1","1.2.4-1","1.2.4-1+powerpcspe1","1.2.4-2","1.2.4-3","1.3.0-1","1.3.0-2","1.3.2-1","1.3.2-2","1.3.2-3","1.3.2-4","1.3.3-1","1.3.4-1","1.3.4-2","1.3.5-1","1.3.5-1~deb7u1","1.3.5-1~deb8u1","1.3.6-1","1.3.6-1~deb7u1","1.3.6-1~deb7u2","1.3.6-1~deb8u1","1.3.7-1","1.3.8-1","1.3.9-1","1.3.9-2","1.3.9-3","1.3.9-4"],"bundled":7},{"source":"osv","ecosystem":"Debian:7","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-1~deb7u1"}]}],"versions":["45.0.1esr-1","45.0.2esr-1","45.0esr-1","45.0esr-2","45.1.0esr-1","45.1.1esr-1","45.2.0esr-1","45.2.0esr-1~deb7u1","45.2.0esr-1~deb8u1","45.3.0esr-1","45.3.0esr-1~deb7u1","45.3.0esr-1~deb8u1","45.3.0esr-2","45.4.0esr-1","45.4.0esr-1~deb7u1","45.4.0esr-1~deb7u2","45.4.0esr-1~deb8u1","45.4.0esr-1~deb8u2","45.4.0esr-2","45.5.0esr-1","45.5.0esr-1~deb8u1","45.5.1esr-1","45.5.1esr-1~deb7u1","45.5.1esr-1~deb8u1","45.6.0esr-1","45.6.0esr-1~deb7u1","45.6.0esr-1~deb8u1","45.7.0esr-1","45.7.0esr-1~deb7u1","45.7.0esr-1~deb8u1","45.7.0esr-2","45.7.0esr-3","45.7.0esr-4","45.8.0esr-1","45.8.0esr-1~deb7u1","45.8.0esr-1~deb8u1","45.9.0esr-1","45.9.0esr-1~deb7u1","45.9.0esr-1~deb8u1","52.0.1esr-1","52.0.2esr-1","52.0esr-1","52.1.0esr-1"],"bundled":18},{"source":"osv","ecosystem":"Debian:9","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-1~deb9u1"}]}],"versions":["45.9.0esr-1","52.0.1esr-1","52.0.2esr-1","52.0esr-1","52.1.0esr-1","52.2.0esr-1~deb7u1","52.2.0esr-1~deb8u1"],"bundled":18},{"source":"osv","ecosystem":"Debian:8","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-1~deb8u1"}]}],"versions":["45.0.1esr-1","45.0.2esr-1","45.0esr-1","45.0esr-2","45.1.0esr-1","45.1.1esr-1","45.2.0esr-1","45.2.0esr-1~deb7u1","45.2.0esr-1~deb8u1","45.3.0esr-1","45.3.0esr-1~deb7u1","45.3.0esr-1~deb8u1","45.3.0esr-2","45.4.0esr-1","45.4.0esr-1~deb7u1","45.4.0esr-1~deb7u2","45.4.0esr-1~deb8u1","45.4.0esr-1~deb8u2","45.4.0esr-2","45.5.0esr-1","45.5.0esr-1~deb8u1","45.5.1esr-1","45.5.1esr-1~deb7u1","45.5.1esr-1~deb8u1","45.6.0esr-1","45.6.0esr-1~deb7u1","45.6.0esr-1~deb8u1","45.7.0esr-1","45.7.0esr-1~deb7u1","45.7.0esr-1~deb8u1","45.7.0esr-2","45.7.0esr-3","45.7.0esr-4","45.8.0esr-1","45.8.0esr-1~deb7u1","45.8.0esr-1~deb8u1","45.9.0esr-1","45.9.0esr-1~deb7u1","45.9.0esr-1~deb8u1","52.0.1esr-1","52.0.2esr-1","52.0esr-1","52.1.0esr-1","52.2.0esr-1~deb7u1"],"bundled":18},{"source":"osv","ecosystem":"Debian:8","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-1~deb8u1"}]}],"versions":["1.2.4-3","1.3.0-1","1.3.0-2","1.3.10-1~deb7u1","1.3.2-1","1.3.2-2","1.3.2-3","1.3.2-4","1.3.3-1","1.3.4-1","1.3.4-2","1.3.5-1","1.3.5-1~deb7u1","1.3.5-1~deb8u1","1.3.6-1","1.3.6-1~deb7u1","1.3.6-1~deb7u2","1.3.6-1~deb8u1","1.3.7-1","1.3.8-1","1.3.9-1","1.3.9-2","1.3.9-3","1.3.9-4"],"bundled":7},{"source":"osv","ecosystem":"Debian:8","package":"icedove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.2.1-4~deb8u1"}]}],"versions":["1:45.0~b4-1","1:45.0~b4-2","1:45.1.0-1","1:45.1.0-1~deb7u1","1:45.1.0-1~deb8u1","1:45.2.0-1","1:45.2.0-1~deb8u1","1:45.2.0-2","1:45.2.0-2~deb7u1","1:45.2.0-3","1:45.2.0-4","1:45.2~b1-1","1:45.3.0-1","1:45.3.0-1~deb7u1","1:45.3.0-1~deb8u1","1:45.4.0-1","1:45.4.0-1~deb7u1","1:45.4.0-1~deb8u1","1:45.5.0-1","1:45.5.1-1","1:45.5.1-1~deb7u1","1:45.5.1-1~deb8u1","1:45.6.0-1","1:45.6.0-1~deb8u1","1:45.6.0-2","1:45.6.0-2~deb7u1","1:45.6.0-3","1:45.7.1-1","1:45.7.1-2","1:45.8.0-1","1:45.8.0-2","1:45.8.0-3","1:45.8.0-3+m68k","1:45.8.0-3+sparc64","1:45.8.0-3~deb7u1","1:45.8.0-3~deb8u1","1:52.1.1-1","1:52.2.0-1","1:52.2.1-1","1:52.2.1-1~deb7u1","1:52.2.1-2","1:52.2.1-3","31.6.0-1","31.7.0-1","31.7.0-1~deb7u1","31.7.0-1~deb8u1","31.8.0-1~deb7u1","31.8.0-1~deb8u1","31.8.0-1~deb8u1+kbsd11","32.0~b1-1","33.0~b1-1","34.0~b1-1","34.0~b1-2","36.0~b1-1","36.0~b1-2","38.0.1-1","38.0~b2-1","38.0~b5-1","38.1.0-1","38.2.0-1","38.2.0-1~stretch","38.2.0-2","38.3.0-1","38.3.0-1~deb7u1","38.3.0-1~deb8u1","38.3.0-2","38.4.0-1","38.4.0-1~deb7u1","38.4.0-1~deb8u1","38.5.0-1","38.5.0-1~deb7u1","38.5.0-1~deb8u1","38.6.0-1","38.6.0-1~deb7u1","38.6.0-1~deb8u1","38.7.0-1","38.7.0-1~deb7u1","38.7.0-1~deb8u1","38.7.0-1~deb8u2","38.7.0-1~deb8u3","38.7.2-1","38.8.0-1~deb7u1","38.8.0-1~deb7u1.1","38.8.0-1~deb8u1","40.0~b1-1","41.0~b2-1","42.0~b1-1","42.0~b2-1","43.0~b1-1","44.0~b1-1"],"bundled":18},{"source":"osv","ecosystem":"Debian:9","package":"icedove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.2.1-4~deb9u1"}]}],"versions":["1:45.8.0-3","1:45.8.0-3+m68k","1:45.8.0-3+sparc64","1:52.1.1-1","1:52.2.0-1","1:52.2.1-1","1:52.2.1-1~deb7u1","1:52.2.1-2","1:52.2.1-3","1:52.2.1-4~deb8u1"],"bundled":18},{"source":"osv","ecosystem":"Mageia:5","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0-1.mga5"}]}],"bundled":19},{"source":"osv","ecosystem":"Mageia:5","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0-1.mga5"}]}],"bundled":19},{"source":"osv","ecosystem":"Mageia:5","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15-1.mga5"}]}],"bundled":19},{"source":"osv","ecosystem":"Mageia:5","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-1.mga5"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el6_9"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.2.0-1.el7_3"}]}],"bundled":19},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"graphite2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"graphite2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"graphite2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"graphite2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"graphite2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"graphite2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"graphite2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"graphite2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.10-1.el7_3"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"54.0+build3-0ubuntu0.14.04.1"}]}],"versions":["24.0+build1-0ubuntu1","25.0+build3-0ubuntu0.13.10.1","28.0~b2+build1-0ubuntu2","28.0+build1-0ubuntu1","28.0+build2-0ubuntu1","28.0+build2-0ubuntu2","29.0+build1-0ubuntu0.14.04.2","30.0+build1-0ubuntu0.14.04.3","31.0+build1-0ubuntu0.14.04.1","32.0+build1-0ubuntu0.14.04.1","32.0.3+build1-0ubuntu0.14.04.1","33.0+build2-0ubuntu0.14.04.1","34.0+build2-0ubuntu0.14.04.1","35.0+build3-0ubuntu0.14.04.2","35.0.1+build1-0ubuntu0.14.04.1","36.0+build2-0ubuntu0.14.04.4","36.0.1+build2-0ubuntu0.14.04.1","36.0.4+build1-0ubuntu0.14.04.1","37.0+build2-0ubuntu0.14.04.1","37.0.1+build1-0ubuntu0.14.04.1","37.0.2+build1-0ubuntu0.14.04.1","38.0+build3-0ubuntu0.14.04.1","39.0+build5-0ubuntu0.14.04.1","39.0.3+build2-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.4","40.0.3+build1-0ubuntu0.14.04.1","41.0+build3-0ubuntu0.14.04.1","41.0.1+build2-0ubuntu0.14.04.1","41.0.2+build2-0ubuntu0.14.04.1","42.0+build2-0ubuntu0.14.04.1","43.0+build1-0ubuntu0.14.04.1","43.0.4+build3-0ubuntu0.14.04.1","44.0+build3-0ubuntu0.14.04.1","44.0.1+build2-0ubuntu0.14.04.1","44.0.2+build1-0ubuntu0.14.04.1","45.0+build2-0ubuntu0.14.04.1","45.0.1+build1-0ubuntu0.14.04.2","45.0.2+build1-0ubuntu0.14.04.1","46.0+build5-0ubuntu0.14.04.2","46.0.1+build1-0ubuntu0.14.04.3","47.0+build3-0ubuntu0.14.04.1","48.0+build2-0ubuntu0.14.04.1","49.0+build4-0ubuntu0.14.04.1","49.0.2+build2-0ubuntu0.14.04.1","50.0+build2-0ubuntu0.14.04.2","50.0.2+build1-0ubuntu0.14.04.1","50.1.0+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.2","52.0+build2-0ubuntu0.14.04.1","52.0.1+build2-0ubuntu0.14.04.1","52.0.2+build1-0ubuntu0.14.04.1","53.0+build6-0ubuntu0.14.04.1","53.0.2+build1-0ubuntu0.14.04.2","53.0.3+build1-0ubuntu0.14.04.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-0ubuntu0.14.04.1"}]}],"versions":["1.2.3-1","1.2.4-1","1.2.4-1ubuntu1","1.2.4-1ubuntu1.1","1.3.6-1ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.2.1+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1","1:52.1.1+build1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"54.0+build3-0ubuntu0.16.04.1"}]}],"versions":["41.0.2+build2-0ubuntu1","42.0+build2-0ubuntu1","44.0+build3-0ubuntu2","44.0.1+build1-0ubuntu1","44.0.2+build1-0ubuntu1","45.0+build2-0ubuntu1","45.0.1+build1-0ubuntu1","45.0.2+build1-0ubuntu1","46.0+build5-0ubuntu0.16.04.2","46.0.1+build1-0ubuntu0.16.04.2","47.0+build3-0ubuntu0.16.04.1","48.0+build2-0ubuntu0.16.04.1","49.0+build4-0ubuntu0.16.04.1","49.0.2+build2-0ubuntu0.16.04.2","50.0+build2-0ubuntu0.16.04.2","50.0.2+build1-0ubuntu0.16.04.1","50.1.0+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.2","52.0+build2-0ubuntu0.16.04.1","52.0.1+build2-0ubuntu0.16.04.1","52.0.2+build1-0ubuntu0.16.04.1","53.0+build6-0ubuntu0.16.04.1","53.0.2+build1-0ubuntu0.16.04.2","53.0.3+build1-0ubuntu0.16.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-0ubuntu0.16.04.1"}]}],"versions":["1.2.4-3ubuntu1","1.3.5-1ubuntu1","1.3.6-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.2.1+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"54.0+build3-0ubuntu0.14.04.1"}]}],"versions":["24.0+build1-0ubuntu1","25.0+build3-0ubuntu0.13.10.1","28.0~b2+build1-0ubuntu2","28.0+build1-0ubuntu1","28.0+build2-0ubuntu1","28.0+build2-0ubuntu2","29.0+build1-0ubuntu0.14.04.2","30.0+build1-0ubuntu0.14.04.3","31.0+build1-0ubuntu0.14.04.1","32.0+build1-0ubuntu0.14.04.1","32.0.3+build1-0ubuntu0.14.04.1","33.0+build2-0ubuntu0.14.04.1","34.0+build2-0ubuntu0.14.04.1","35.0+build3-0ubuntu0.14.04.2","35.0.1+build1-0ubuntu0.14.04.1","36.0+build2-0ubuntu0.14.04.4","36.0.1+build2-0ubuntu0.14.04.1","36.0.4+build1-0ubuntu0.14.04.1","37.0+build2-0ubuntu0.14.04.1","37.0.1+build1-0ubuntu0.14.04.1","37.0.2+build1-0ubuntu0.14.04.1","38.0+build3-0ubuntu0.14.04.1","39.0+build5-0ubuntu0.14.04.1","39.0.3+build2-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.4","40.0.3+build1-0ubuntu0.14.04.1","41.0+build3-0ubuntu0.14.04.1","41.0.1+build2-0ubuntu0.14.04.1","41.0.2+build2-0ubuntu0.14.04.1","42.0+build2-0ubuntu0.14.04.1","43.0+build1-0ubuntu0.14.04.1","43.0.4+build3-0ubuntu0.14.04.1","44.0+build3-0ubuntu0.14.04.1","44.0.1+build2-0ubuntu0.14.04.1","44.0.2+build1-0ubuntu0.14.04.1","45.0+build2-0ubuntu0.14.04.1","45.0.1+build1-0ubuntu0.14.04.2","45.0.2+build1-0ubuntu0.14.04.1","46.0+build5-0ubuntu0.14.04.2","46.0.1+build1-0ubuntu0.14.04.3","47.0+build3-0ubuntu0.14.04.1","48.0+build2-0ubuntu0.14.04.1","49.0+build4-0ubuntu0.14.04.1","49.0.2+build2-0ubuntu0.14.04.1","50.0+build2-0ubuntu0.14.04.2","50.0.2+build1-0ubuntu0.14.04.1","50.1.0+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.2","52.0+build2-0ubuntu0.14.04.1","52.0.1+build2-0ubuntu0.14.04.1","52.0.2+build1-0ubuntu0.14.04.1","53.0+build6-0ubuntu0.14.04.1","53.0.2+build1-0ubuntu0.14.04.2","53.0.3+build1-0ubuntu0.14.04.2"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"54.0+build3-0ubuntu0.16.04.1"}]}],"versions":["41.0.2+build2-0ubuntu1","42.0+build2-0ubuntu1","44.0+build3-0ubuntu2","44.0.1+build1-0ubuntu1","44.0.2+build1-0ubuntu1","45.0+build2-0ubuntu1","45.0.1+build1-0ubuntu1","45.0.2+build1-0ubuntu1","46.0+build5-0ubuntu0.16.04.2","46.0.1+build1-0ubuntu0.16.04.2","47.0+build3-0ubuntu0.16.04.1","48.0+build2-0ubuntu0.16.04.1","49.0+build4-0ubuntu0.16.04.1","49.0.2+build2-0ubuntu0.16.04.2","50.0+build2-0ubuntu0.16.04.2","50.0.2+build1-0ubuntu0.16.04.1","50.1.0+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.2","52.0+build2-0ubuntu0.16.04.1","52.0.1+build2-0ubuntu0.16.04.1","52.0.2+build1-0ubuntu0.16.04.1","53.0+build6-0ubuntu0.16.04.1","53.0.2+build1-0ubuntu0.16.04.2","53.0.3+build1-0ubuntu0.16.04.2"],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.2.1+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1","1:52.1.1+build1-0ubuntu0.14.04.1"],"bundled":19},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.2.1+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1"],"bundled":19},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-0ubuntu0.14.04.1"}]}],"versions":["1.2.3-1","1.2.4-1","1.2.4-1ubuntu1","1.2.4-1ubuntu1.1","1.3.6-1ubuntu0.14.04.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"graphite2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.10-0ubuntu0.16.04.1"}]}],"versions":["1.2.4-3ubuntu1","1.3.5-1ubuntu1","1.3.6-1ubuntu1"],"bundled":8},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2-36.1"}]}],"bundled":21}],"products":[{"vendor":"mozilla","product":"firefox"},{"vendor":"sil","product":"graphite2"}],"references":[{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","Vendor Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7774","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-2j49-q898-whm9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-7774","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0178.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21088","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/","tags":["advisory","article"]},{"url":"https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/","tags":["web"]},{"url":"https://rhn.redhat.com/errata/RHSA-2017-1440.html","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2017-0217.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20778","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2017-05/msg00053.html","tags":["web"]},{"url":"https://www.debian.org/security/2017/dsa-3894","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1440","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461257","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1461264","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1440.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5470","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5470","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5470","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-5470","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5472","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5472","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5472","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-5472","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7749","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7749","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7750","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7750","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7751","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7751","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7751","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7752","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7752","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7752","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7754","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7754","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7754","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7754","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7756","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7756","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7756","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7756","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7757","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7757","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7757","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7757","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7758","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7758","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7758","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7758","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7764","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7764","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7764","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7764","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472212","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7771","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7771","tags":["advisory"]},{"url":"https://sourceforge.net/p/silgraphite/mailman/message/35824024/","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7778","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472213","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7772","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7772","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472215","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7773","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7773","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472219","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7774","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7775","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7775","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472223","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7776","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1472225","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7777","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7778","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7778","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1561","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1561.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1793","tags":["advisory"]},{"url":"https://raw.githubusercontent.com/silnrsi/graphite/master/ChangeLog","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1793.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-7774","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3315-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3321-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3398-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-5470","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5471","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5472","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7749","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7752","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7764","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7772","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7773","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7777","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-7778","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1040105","tags":["report"]},{"url":"https://bugzilla.suse.com/1042090","tags":["report"]},{"url":"https://bugzilla.suse.com/1043960","tags":["report"]},{"url":"https://bugzilla.suse.com/1273265","tags":["report"]},{"url":"https://bugzilla.suse.com/1355039","tags":["report"]},{"url":"https://bugzilla.suse.com/1356558","tags":["report"]},{"url":"https://bugzilla.suse.com/1356824","tags":["report"]},{"url":"https://bugzilla.suse.com/1357090","tags":["report"]},{"url":"https://bugzilla.suse.com/1359547","tags":["report"]},{"url":"https://bugzilla.suse.com/1360309","tags":["report"]},{"url":"https://bugzilla.suse.com/1363396","tags":["report"]},{"url":"https://bugzilla.suse.com/1364283","tags":["report"]},{"url":"https://bugzilla.suse.com/1365602","tags":["report"]},{"url":"https://bugzilla.suse.com/1366595","tags":["report"]},{"url":"https://bugzilla.suse.com/1368490","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7778","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-7774","description":"Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.","status":"published","published":"2019-04-12T19:32:43Z","modified":"2024-08-05T16:12:28.373Z","updated_at":"2026-11-02T14:33:20.488433Z"}],"euvd":[{"id":"EUVD-2017-16749","description":"Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.","status":"published","published":"2019-04-12T19:32:43Z","modified":"2024-08-05T16:12:28Z","updated_at":"2026-11-03T02:39:07.559484Z"}],"ghsa":[{"id":"GHSA-2j49-q898-whm9","title":"Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite...","description":"Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.","status":"published","published":"2022-05-14T01:10:12Z","modified":"2023-02-02T05:03:03Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:51:33.931227Z"}],"nvd":[{"id":"CVE-2017-7774","description":"Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.","status":"published","published":"2019-04-15T12:31:08.507Z","modified":"2026-06-17T01:25:10.097Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:19.545286Z"}],"osv":[{"id":"CVE-2017-7774","description":"Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.","status":"published","published":"2019-04-15T12:31:08.507Z","modified":"2026-10-24T10:30:54.878731365Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:06.412595Z"},{"id":"DEBIAN-CVE-2017-7774","description":"Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.","status":"published","published":"2019-04-15T12:31:08.507Z","modified":"2026-09-01T20:02:42.617005286Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"RHSA-2017:1440","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T00:24:51Z","modified":"2026-06-26T10:34:11Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:1561","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T00:24:57Z","modified":"2026-06-26T10:34:19Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:1793","title":"Red Hat Security Advisory: graphite2 security update","status":"published","published":"2024-09-16T00:25:04Z","modified":"2026-06-26T10:34:32Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2017-7774","description":"Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.","status":"published","published":"2017-06-14T00:00:00Z","modified":"2026-04-22T11:33:09.418567Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:15.773974Z"},{"id":"DLA-1007-1","title":"icedove - security update","status":"published","published":"2017-06-30T00:00:00Z","modified":"2026-03-09T01:01:48.504493Z","updated_at":"2026-11-02T15:46:08.746073Z"},{"id":"DLA-1013-1","title":"graphite2 - security update","status":"published","published":"2017-07-05T00:00:00Z","modified":"2026-03-09T01:01:11.32015Z","updated_at":"2026-11-02T15:46:08.746073Z"},{"id":"DLA-991-1","title":"firefox-esr - security update","status":"published","published":"2017-06-18T00:00:00Z","modified":"2026-03-09T02:11:19.01207Z","updated_at":"2026-11-02T15:46:13.584509Z"},{"id":"DSA-3881-1","title":"firefox-esr - security update","status":"published","published":"2017-06-14T00:00:00Z","modified":"2026-03-09T01:18:06.666554Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"DSA-3894-1","title":"graphite2 - security update","status":"published","published":"2017-06-22T00:00:00Z","modified":"2026-03-09T01:18:08.584539Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"DSA-3918-1","title":"icedove - security update","status":"published","published":"2017-07-25T00:00:00Z","modified":"2026-03-09T01:19:21.467171Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0178","title":"Updated firefox packages fix security vulnerabilities","description":"Multiple flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning Firefox (CVE-2017-5470, CVE-2017-5472, CVE-2017-7749,\nCVE-2017-7751, CVE-2017-7756, CVE-2017-7771, CVE-2017-7772,\nCVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,\nCVE-2017-7777, CVE-2017-7778, CVE-2017-7750, CVE-2017-7752,\nCVE-2017-7754, CVE-2017-7757, CVE-2017-7758, CVE-2017-7764).\n","status":"published","published":"2017-06-19T07:44:03Z","modified":"2026-04-16T06:22:33.230020369Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2017-0217","title":"Updated graphite2 packages fix security vulnerabilities","description":"An out-of-bounds write triggered with a maliciously crafted Graphite\nfont could lead to a crash or potentially code execution\n(CVE-2017-5436).\n\nMultiple vulnerabilities have been found in the Graphite font rendering\nengine which might result in denial of service or the execution of\narbitrary code if a malformed font file is processed (CVE-2017-7771,\nCVE-2017-7772, CVE-2017-7773, CVE-2017-7774, CVE-2017-7775,\nCVE-2017-7776, CVE-2017-7777, CVE-2017-7778).\n","status":"published","published":"2017-07-25T22:07:12Z","modified":"2026-04-16T06:23:34.955800313Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2017:1579-1","title":"Security update for Mozilla Thunderbird","description":"This update to Thunderbird 52.2 fixes security issues and bugs.\n\nThe following vulnerabilities were fixed:\n    \n* CVE-2017-5472: Use-after-free using destroyed node when regenerating trees\n* CVE-2017-7749: Use-after-free during docshell reloading\n* CVE-2017-7750: Use-after-free with track elements\n* CVE-2017-7751: Use-after-free with content viewer listeners\n* CVE-2017-7752: Use-after-free with IME input\n* CVE-2017-7754: Out-of-bounds read in WebGL with ImageInfo object\n* CVE-2017-7756: Use-after-free and use-after-scope logging XHR header errors\n* CVE-2017-7757: Use-after-free in IndexedDB\n* CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,\n  CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,\n  CVE-2017-7777: Vulnerabilities in the Graphite 2 library\n* CVE-2017-7758: Out-of-bounds read in Opus encoder\n* CVE-2017-7764: Domain spoofing with combination of Canadian Syllabics and other unicode blocks\n* CVE-2017-5470: Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2\n\nMozilla Thunderbird now requires NSS 3.28.5.\n\nThe following bugs were fixed:\n\n* Embedded images not shown in email received from Hotmail/Outlook webmailer\n* Detection of non-ASCII font names in font selector\n* Attachment not forwarded correctly under certain circumstances\n* Multiple requests for master password when GMail OAuth2 is enabled\n* Large number of blank pages being printed under certain circumstances when invalid preferences were present\n* Messages sent via the Simple MAPI interface are forced to HTML\n* Calendar: Invitations can't be printed\n* Mailing list (group) not accessible from macOS or Outlook address book\n* Clicking on links with references/anchors where target doesn't exist in the message not opening in external browser\n  ","status":"published","published":"2017-06-16T09:03:31Z","modified":"2026-02-04T03:49:02.663791Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"USN-3315-1","title":"firefox vulnerabilities","description":"Multiple security issues were discovered in Firefox. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit these to cause a denial of service, read uninitialized\nmemory, obtain sensitive information, spoof the addressbar contents, or\nexecute arbitrary code. (CVE-2017-5470, CVE-2017-5471, CVE-2017-5472,\nCVE-2017-7749, CVE-2017-7750, CVE-2017-7751, CVE-2017-7752, CVE-2017-7754,\nCVE-2017-7756, CVE-2017-7757, CVE-2017-7758, CVE-2017-7762, CVE-2017-7764)\n\nMultiple security issues were discovered in the Graphite 2 library used by\nFirefox. If a user were tricked in to opening a specially crafted website,\nan attacker could potentially exploit these to cause a denial of service,\nread uninitialized memory, or execute arbitrary code. (CVE-2017-7771,\nCVE-2017-7772, CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,\nCVE-2017-7777, CVE-2017-7778)\n","status":"published","published":"2017-06-15T11:46:10Z","modified":"2026-04-22T09:36:29.694721Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3321-1","title":"thunderbird vulnerabilities","description":"Multiple security issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted website in a browsing context,\nan attacker could potentially exploit these to cause a denial of service,\nread uninitialized memory, obtain sensitive information or execute\narbitrary code. (CVE-2017-5470, CVE-2017-5472,\nCVE-2017-7749, CVE-2017-7750, CVE-2017-7751, CVE-2017-7752, CVE-2017-7754,\nCVE-2017-7756, CVE-2017-7757, CVE-2017-7758, CVE-2017-7764)\n\nMultiple security issues were discovered in the Graphite 2 library used\nby Thunderbird. If a user were tricked in to opening a specially crafted\nmessage, an attacker could potentially exploit these to cause a denial of\nservice, read uninitialized memory, or execute arbitrary code.\n(CVE-2017-7771, CVE-2017-7772, CVE-2017-7773, CVE-2017-7774, CVE-2017-7775,\nCVE-2017-7776, CVE-2017-7777, CVE-2017-7778)\n","status":"published","published":"2017-07-05T19:42:44Z","modified":"2026-04-22T09:35:41.242777Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-3398-1","title":"graphite2 vulnerabilities","description":"Holger Fuhrmannek and Tyson Smith discovered that graphite2 incorrectly\nhandled certain malformed fonts. If a user or automated system were tricked\ninto opening a specially-crafted font file, a remote attacker could use\nthis issue to cause graphite2 to crash, resulting in a denial of service,\nor possibly execute arbitrary code.\n","status":"published","published":"2017-08-21T13:07:35Z","modified":"2026-04-22T09:37:57.938204Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}