Back to feed
EUVD-2014-9477 · Published Feb 8, 2015
sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table.
Technologies
Redhat Enterprise Linux Hpc Node EusFedoraproject FedoraOpensuse OpensuseRedhat Enterprise Linux Hpc NodeDebian Debian LinuxCanonical Ubuntu LinuxRedhat Enterprise Linux DesktopRedhat Enterprise Linux ServerFreetype FreetypeRedhat Enterprise Linux Server EusRedhat Enterprise Linux Workstation
Weaknesses
CWE-119
CVSS scores
- v2.06.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://code.google.com/p/google-security-research/issues/detail?id=166
- http://advisories.mageia.org/MGASA-2015-0083.html
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=677ddf4f1dc1b36cef7c7ddd59a14c508f4b1891
- http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html
Potentially impacted assets
See if this affects your attack surface
