Wind River Support Network

HomeDefectsLIN6-9465
Fixed

LIN6-9465 : Security Advisory - freetype - CVE-2014-9675

Created: Feb 25, 2015    Updated: Dec 3, 2018
Resolved Date: Mar 11, 2015
Found In Version: 6.0
Fix Version: 6.0.0.19
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9675

Other Downloads

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube