CVE-2014-9660 in FreeType

Sumário (Inglês)

The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted BDF font.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

07/02/2015

Divulgação

08/02/2015

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
69071	FreeType _bdf_parse_glyphs Negação de Serviço	476	Não definido	Correção oficial	CVE-2014-9660

Fontes

• MITRE
• NVD
• CVE Details