Wind River Support Network

HomeDefectsLIN5-20113
Fixed

LIN5-20113 : Security Advisory - freetype - CVE-2014-9675

Created: Feb 25, 2015    Updated: Dec 19, 2017
Resolved Date: Mar 11, 2015
Found In Version: 5.0.1
Fix Version: 5.0.1.25
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9675

Other Downloads


Live chat
Online