Security researchers have found vulnerabilities in Graphite, also known as Libgraphite font processing library, that affects a number of systems. The vulnerabilities, if exploited, allow an attacker to seed malicious fonts to a machine. The Libgraphite library is utilised by Linux, Thunderbird, WordPad, Firefox, OpenOffice, as well as several other major platforms and applications.
Security researchers from Cisco have posted an advisory to outline four vulnerabilities in the Libgraphite font processing library. One of the vulnerabilities allows the attackers to execute arbitrary code on the machine, and among other things, crash the system.
Two of the vulnerabilities can result in denial of service situations. “An attacker simply needs the user to run a Graphite-enabled application that renders a page using a specially crafted font that triggers one of these vulnerabilities,” the team wrote in a blog post.
Source: http://gadgets.ndtv.com/internet/news/vulnerabilities-in-font-processing-library-impact-firefox-linux-report-799808
Submitted by: Arnfried Walbrecht
Comments are closed.