NetSight
IP …
medium6.8

CVE-2014-9673

Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service …

Impact

Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 10.04, 12.04, 14.04, 14.10, 15.04
DebianDebian Linux
Version 7.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Hpc Node
Versions 6.0, 7.0
RedhatEnterprise Linux Hpc Node Eus
Version 7.1
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Eus
Versions 6.6.z, 7.1
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
OpensuseOpensuse
Versions 13.1, 13.2
FreetypeFreetype
through 2.5.3

Weakness classification

CWE-119

References