Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-wyhd-jvb3-73fd |
| Summary | Mozilla community member James Kitchener reported a crash in
DirectWrite when rendering MathML content with specific fonts due to an error in
how font resources and tables are handled. This leads to use-after-free of a
DirectWrite font-face object, resulting in a potentially exploitable crash.
This issue is limited to the Windows platform and does not
affect OS X or Linux systems. In general this flaw cannot be exploited through
email in the Thunderbird product because scripting is disabled, but is potentially
a risk in browser or browser-like contexts. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
|
| Exploits |
|
| Severity_range_score | 9.0 - 10.0 |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-wyhd-jvb3-73fd |