Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-9669

Опубликовано: 24 нояб. 2014
Источник: redhat
CVSS2: 4.3

Описание

Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 4freetypeWill not fix
Red Hat Enterprise Linux 5freetypeWill not fix
Red Hat Enterprise Virtualization 3mingw-virt-viewerAffected
Red Hat Enterprise Linux 6freetypeFixedRHSA-2015:069617.03.2015
Red Hat Enterprise Linux 7freetypeFixedRHSA-2015:069617.03.2015

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-190->CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1191092freetype: multiple integer overflows leading to buffer over-reads in cmap handling

4.3 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 10 лет назад

Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.

nvd
больше 10 лет назад

Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.

debian
больше 10 лет назад

Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 a ...

github
больше 3 лет назад

Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.

oracle-oval
больше 10 лет назад

ELSA-2015-0696: freetype security update (IMPORTANT)

4.3 Medium

CVSS2