← Terug naar CVE-database
Beschrijving
The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font.
Vendors
Oracle
Canonical
Fedoraproject
Freetype
Debian
Opensuse
Redhat
Affected products
Solaris
Ubuntu Linux
Fedora
Freetype
Debian Linux
Opensuse
Enterprise Linux Desktop
Enterprise Linux Hpc Node
Enterprise Linux Hpc Node Eus
Enterprise Linux Server
Enterprise Linux Server Eus
Enterprise Linux Workstation