NetSight
IP …
high7.5

CVE-2014-9668

The woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting length values, which allows …

Impact

The woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting length values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Web Open Font Format (WOFF) file.

Affected products

VendorProductAffected versions
OpensuseOpensuse
Versions 13.1, 13.2
FedoraprojectFedora
Versions 20, 21
CanonicalUbuntu Linux
Versions 10.04, 12.04, 14.04, 14.10, 15.04
FreetypeFreetype
through 2.5.3

Weakness classification

CWE-119

References