NetSight
IP …
medium4.3

CVE-2014-9671

Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointe…

Impact

Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incremented.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Hpc Node
Versions 6, 7.0
RedhatEnterprise Linux Hpc Node Eus
Version 7.1
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Eus
Versions 6.6.z, 7.1
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
DebianDebian Linux
Version 7.0
CanonicalUbuntu Linux
Versions 10.04, 12.04, 14.04, 14.10, 15.04
OracleSolaris
Versions 10.0, 11.2
OpensuseOpensuse
Versions 13.1, 13.2
FreetypeFreetype
through 2.5.3

References