CVE-2014-9669

freetype: multiple integer overflows leading to buffer over-reads in cmap handling

Published Feb 8, 2015 CVSS 2.0 · 6.8 Medium EPSS 3.9% KEV · Not listed
Description
Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-185-1 freetype security update
Debian DSA Debian DSA DSA-3188-1 freetype security update
EUVD EUVD EUVD-2014-9479 Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table.
Ubuntu USN Ubuntu USN USN-2510-1 FreeType vulnerabilities
History

No history.