Описание
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 2.11.94-0ubuntu2 |
| esm-infra-legacy/trusty | released | 2.11.0-0ubuntu4.2 |
| esm-infra-legacy/xenial | released | 2.11.94-0ubuntu1.1 |
| esm-infra/xenial | released | 2.11.94-0ubuntu1.1 |
| precise | released | 2.8.0-3ubuntu9.2 |
| precise/esm | DNE | precise was released [2.8.0-3ubuntu9.2] |
| trusty | released | 2.11.0-0ubuntu4.2 |
| trusty/esm | released | 2.11.0-0ubuntu4.2 |
| upstream | released | 2.12.1 |
| vivid/stable-phone-overlay | ignored | end of life |
Показывать по
EPSS
4.6 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.
fontconfig before 2.12.1 does not validate offsets, which allows local ...
EPSS
4.6 Medium
CVSS2
7.8 High
CVSS3