Wind River Support Network


LIN6-9492 : Security Advisory - freetype - CVE-2014-9659

Created: Feb 25, 2015    Updated: Dec 3, 2018
Resolved Date: Mar 11, 2015
Found In Version: 6.0
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2240.

Other Downloads

Live chat