QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2014-9659

Back to search

CVE-2014-9659

Published: Feb 8, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2240.

VendorProductVersions

n/a

n/a

affected
n/a

References

GLSA-201503-05
vendor-advisory
x_refsource_GENTOO
USN-2739-1
vendor-advisory
x_refsource_UBUNTU
openSUSE-SU-2015:0627
vendor-advisory
x_refsource_SUSE
FEDORA-2015-2216
vendor-advisory
x_refsource_FEDORA
USN-2510-1
vendor-advisory
x_refsource_UBUNTU
FEDORA-2015-2237
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now