medium5.0
CVE-2014-9675
bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discov…
Impact
bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canonical | Ubuntu Linux | Versions 10.04, 12.04, 14.04, 14.10, 15.04 |
| Freetype | Freetype | through 2.5.3 |
| Debian | Debian Linux | Version 7.0 |
| Fedoraproject | Fedora | Versions 20, 21 |
| Redhat | Enterprise Linux Desktop | Versions 6.0, 7.0 |
| Redhat | Enterprise Linux Hpc Node | Versions 6.0, 7.0 |
| Redhat | Enterprise Linux Hpc Node Eus | Version 7.1 |
| Redhat | Enterprise Linux Server | Versions 6.0, 7.0 |
| Redhat | Enterprise Linux Server Eus | Versions 6.6.z, 7.1 |
| Redhat | Enterprise Linux Workstation | Versions 6.0, 7.0 |
| Opensuse | Opensuse | Versions 13.1, 13.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://advisories.mageia.org/MGASA-2015-0083.html
- http://code.google.com/p/google-security-research/issues/detail?id=151
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2c4832d30939b45c05757f0a05128ce64c4cacc7
- http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html
- http://rhn.redhat.com/errata/RHSA-2015-0696.html
- http://www.debian.org/security/2015/dsa-3188
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:055
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- http://www.securityfocus.com/bid/72986
- http://www.ubuntu.com/usn/USN-2510-1
- http://www.ubuntu.com/usn/USN-2739-1
- https://security.gentoo.org/glsa/201503-05
- https://source.android.com/security/bulletin/2016-11-01.html
- http://advisories.mageia.org/MGASA-2015-0083.html
- http://code.google.com/p/google-security-research/issues/detail?id=151
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2c4832d30939b45c05757f0a05128ce64c4cacc7
- http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html
- http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html
- http://rhn.redhat.com/errata/RHSA-2015-0696.html
- http://www.debian.org/security/2015/dsa-3188
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:055
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html