QwikSec

Security Database

CVE

CWE

Training

CVE-2014-2240

Published: Mar 12, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_SECTRACK

vendor-advisory

x_refsource_UBUNTU

third-party-advisory

x_refsource_SECUNIA

http://www.freetype.org/index.html

x_refsource_CONFIRM

http://savannah.nongnu.org/bugs/?41697

x_refsource_CONFIRM

http://sourceforge.net/projects/freetype/files/freetype2/2.5.3

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.