NetSight
IP …
medium5.8

CVE-2014-9672

Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read)…

Impact

Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file.

Affected products

VendorProductAffected versions
OracleSolaris
Versions 10.0, 11.2
DebianDebian Linux
Version 7.0
CanonicalUbuntu Linux
Versions 10.04, 12.04, 14.04, 14.10, 15.04
FreetypeFreetype
through 2.5.3
OpensuseOpensuse
Versions 13.1, 13.2

Weakness classification

CWE-119

References