Wind River Support Network

HomeDefectsLIN7-2998
Fixed

LIN7-2998 : Security Advisory - freetype - CVE-2014-9675

Created: Feb 25, 2015    Updated: Sep 8, 2018
Resolved Date: Mar 11, 2015
Found In Version: 7.0
Fix Version: 7.0.0.4
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Userspace

Description

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9675

Other Downloads


CVEs


Live chat
Online