CVE-2014-9747

Published: Jun 7, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode, which allows remote attackers to cause a denial of service (infinite loop) via a Type42 font.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[oss-security] 20150911 CVE Request: 2 FreeType issues

mailing-list

x_refsource_MLIST

http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/src/type42/t42parse.c?id=8b281f83e8516535756f92dbf90940ac44bd45e1

x_refsource_CONFIRM

[oss-security] 20150925 Re: CVE Request: 2 FreeType issues

mailing-list

x_refsource_MLIST

https://savannah.nongnu.org/bugs/?41309

x_refsource_MISC

DSA-3370

vendor-advisory

x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2014-9747

Description

Affected Products

References