[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-9745Date: (C)2015-09-16   (M)2023-12-22


The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a "broken number-with-base" in a Postscript stream, as demonstrated by 8#garbage.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
SECTRACK-1033536
BID-76727
DSA-3370
USN-2739-1
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=df14e6c0b9592cbb24d5381dfc6106b14f915e75
http://savannah.nongnu.org/bugs/index.php?41590
https://bugs.launchpad.net/ubuntu/+source/freetype/+bug/1492124
https://code.google.com/p/chromium/issues/detail?id=459050
openSUSE-SU-2015:1704

CPE    7
cpe:/o:opensuse:opensuse:13.1
cpe:/o:canonical:ubuntu_linux:15.04
cpe:/o:canonical:ubuntu_linux:12.04::~~lts~~~
cpe:/o:canonical:ubuntu_linux:14.04::~~lts~~~
...
CWE    1
CWE-399
OVAL    4
oval:org.secpod.oval:def:602244
oval:org.secpod.oval:def:89045387
oval:org.secpod.oval:def:52570
oval:org.secpod.oval:def:702742
...

© SecPod Technologies