Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2014-9661
Description:type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font.
Test IDs: 1.3.6.1.4.1.25623.1.0.120367   1.3.6.1.4.1.25623.1.0.123157   1.3.6.1.4.1.25623.1.1.4.2015.0463.1  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-9661
BugTraq ID: 72986
http://www.securityfocus.com/bid/72986
Debian Security Information: DSA-3188 (Google Search)
http://www.debian.org/security/2015/dsa-3188
http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
https://security.gentoo.org/glsa/201503-05
http://www.mandriva.com/security/advisories?name=MDVSA-2015:055
http://code.google.com/p/google-security-research/issues/detail?id=187
http://packetstormsecurity.com/files/134396/FreeType-2.5.3-Type42-Parsing-Use-After-Free.html
RedHat Security Advisories: RHSA-2015:0696
http://rhn.redhat.com/errata/RHSA-2015-0696.html
SuSE Security Announcement: openSUSE-SU-2015:0627 (Google Search)
http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html
http://www.ubuntu.com/usn/USN-2510-1
http://www.ubuntu.com/usn/USN-2739-1




© 1998-2024 E-Soft Inc. All rights reserved.