Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 1 min 162 bronnen 12 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2014-9663

HIGH · 7.5 CVSS Gepubliceerd: CWE-119

Beschrijving

The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted cmap SFNT table.

Vendors

Freetype Debian Opensuse Fedoraproject Oracle Canonical Redhat

Affected products

Freetype Debian Linux Opensuse Fedora Solaris Ubuntu Linux Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Hpc Node Eus Enterprise Linux Server Enterprise Linux Server Eus Enterprise Linux Workstation

References