CVE-2014-9675 in Google Android

Resumen (Inglés)

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.

Reservar

2015-02-07

Divulgación

2015-02-08

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
93489	Google Android Freetype escalada de privilegios	264	No está definido	Arreglo oficial	CVE-2014-9675
69087	FreeType escalada de privilegios	264	No probado	Arreglo oficial	CVE-2014-9675