← Terug naar CVE-database
Beschrijving
The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted BDF font.
Vendors
Opensuse
Canonical
Debian
Oracle
Fedoraproject
Redhat
Freetype
Affected products
Opensuse
Ubuntu Linux
Debian Linux
Solaris
Fedora
Enterprise Linux Desktop
Enterprise Linux Hpc Node
Enterprise Linux Hpc Node Eus
Enterprise Linux Server
Enterprise Linux Server Eus
Enterprise Linux Workstation
Freetype