[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2016-2793":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":26,"cwes":27,"cpes":29,"technologies":52,"references":59,"score":86,"epss_score":87,"epss_percentile":88,"is_kev":89,"cisa_kev_date_added":90,"cisa_kev_due_date":90,"cisa_ssvc":91,"attack_mappings":97,"exploits":104},189631,"CVE-2016-2793","EUVD-2016-3866","CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.","2016-03-13T18:59:00Z",{"cvss_v2.0":10,"cvss_v3.0":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",6.8,"NETWORK","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NONE","PARTIAL","MEDIUM",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":22,"userInteraction":24,"attackComplexity":25,"availabilityImpact":22,"privilegesRequired":15,"confidentialityImpact":22},"UNCHANGED","3.0",8.8,"HIGH","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","REQUIRED","LOW",true,[28],"CWE-119",[30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51],"cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*","cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.0.1:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.2.1:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.5.0:*:*:*:*:*:*:*","cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.4.0:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.5.1:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.1.0:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","cpe:2.3:a:sil:graphite2:*:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.3.0:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.6.1:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.2.0:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.6.0:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.0.5:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.0:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:38.1.1:*:*:*:*:*:*:*","cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","cpe:2.3:o:oracle:linux:5.0:*:*:*:*:*:*:*",[53,54,55,56,57,58],"Opensuse Opensuse","Opensuse Leap","Suse Linux Enterprise","Oracle Linux","Sil Graphite2","Mozilla Firefox",[60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85],"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00027.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00029.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00031.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00050.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00068.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00089.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00091.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-03\u002Fmsg00093.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-07\u002Fmsg00006.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-07\u002Fmsg00007.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-07\u002Fmsg00008.html","http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3510","http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3515","http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3520","http:\u002F\u002Fwww.mozilla.org\u002Fsecurity\u002Fannounce\u002F2016\u002Fmfsa2016-37.html","http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Flinuxbulletinjan2016-2867209.html","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F84222","http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1035215","http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2917-1","http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2917-2","http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2917-3","http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2927-1","http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-2934-1","https:\u002F\u002Fbugzilla.mozilla.org\u002Fshow_bug.cgi?id=1243513","https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201605-06","https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201701-63",0.64,0.02708,0.85885,false,null,{"timestamp":90,"automatable":92,"tech_impact":93,"exploitation":94,"cisa_decision":95,"cisa_remediation_timeline":96},"no","partial","none",{},"FSU",[98],{"name":99,"source":100,"tactics":101,"technique_id":103},"Exploit Public-Facing Application","attack_vector",[102],"initial-access","T1190",[]]