7.5

CVE-2014-9656

Exploit
The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted OpenType font.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fedoraproject ≫ Fedora Version20
Fedoraproject ≫ Fedora Version21
Freetype ≫ Freetype Version <= 2.5.3
Debian ≫ Debian Linux Version7.0
Opensuse ≫ Opensuse Version13.1
Opensuse ≫ Opensuse Version13.2
Canonical ≫ Ubuntu Linux Version10.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.10
Canonical ≫ Ubuntu Linux Version15.04
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.58% 0.904
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
Third Party Advisory
http://www.ubuntu.com/usn/USN-2739-1
Third Party Advisory
http://advisories.mageia.org/MGASA-2015-0083.html
Third Party Advisory
http://code.google.com/p/google-security-research/issues/detail?id=196
Exploit
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f0292bb9920aa1dbfed5f53861e7c7a89b35833a
Issue Tracking
http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3188
http://www.mandriva.com/security/advisories?name=MDVSA-2015:055
Third Party Advisory
http://www.securityfocus.com/bid/72986
http://www.ubuntu.com/usn/USN-2510-1
Third Party Advisory
https://security.gentoo.org/glsa/201503-05