Description
Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-185-1 | freetype security update |
Debian DSA |
DSA-3188-1 | freetype security update |
EUVD |
EUVD-2014-9480 | Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row. |
Ubuntu USN |
USN-2510-1 | FreeType vulnerabilities |
References
History
No history.
Subscriptions
Canonical
Subscribe
Ubuntu Linux
Subscribe
Debian
Subscribe
Debian Linux
Subscribe
Fedoraproject
Subscribe
Fedora
Subscribe
Freetype
Subscribe
Freetype
Subscribe
Opensuse
Subscribe
Opensuse
Subscribe
Oracle
Subscribe
Solaris
Subscribe
Redhat
Subscribe
Enterprise Linux
Subscribe
Enterprise Linux Desktop
Subscribe
Enterprise Linux Hpc Node
Subscribe
Enterprise Linux Hpc Node Eus
Subscribe
Enterprise Linux Server
Subscribe
Enterprise Linux Server Eus
Subscribe
Enterprise Linux Workstation
Subscribe
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T13:55:04.552Z
Reserved: 2015-02-07T00:00:00.000Z
Link: CVE-2014-9670
No data.
Status : Deferred
Published: 2015-02-08T11:59:31.693
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-9670
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
EUVD
Ubuntu USN