Описание
FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | released | 2.1.10-1ubuntu2.5 |
| devel | not-affected | 2.3.6-1ubuntu1 |
| feisty | released | 2.2.1-5ubuntu1.2 |
| gutsy | released | 2.3.5-1ubuntu4.7.10.1 |
| hardy | released | 2.3.5-1ubuntu4.8.04.1 |
| upstream | released | 2.3.6-1 |
Показывать по
EPSS
7.5 High
CVSS2
Связанные уязвимости
FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.
FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.
FreeType2 before 2.3.6 allow context-dependent attackers to execute ar ...
FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.
EPSS
7.5 High
CVSS2