← Terug naar CVE-database
Beschrijving
bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.
Vendors
Canonical
Freetype
Debian
Fedoraproject
Redhat
Opensuse
Affected products
Ubuntu Linux
Freetype
Debian Linux
Fedora
Enterprise Linux Desktop
Enterprise Linux Hpc Node
Enterprise Linux Hpc Node Eus
Enterprise Linux Server
Enterprise Linux Server Eus
Enterprise Linux Workstation
Opensuse