CVE-2014-9671

MEDIUM · 4.3 CVSS Gepubliceerd: 08-02-2015

Beschrijving

Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incremented.

Vendors

Redhat Debian Canonical Oracle Opensuse Freetype

Affected products

Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Hpc Node Eus Enterprise Linux Server Enterprise Linux Server Eus Enterprise Linux Workstation Debian Linux Ubuntu Linux Solaris Opensuse Freetype

References

advisories.mageia.org
code.google.com
git.savannah.gnu.org
lists.opensuse.org
rhn.redhat.com
www.debian.org
www.mandriva.com
www.oracle.com
www.securityfocus.com
www.ubuntu.com
www.ubuntu.com
security.gentoo.org