CVE-2014-9665

2015-02-0811:59:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2014-9665

load_sbit_png

freetype

integer overflow

heap-based buffer overflow

png

.ttf font file

security vulnerability

nvd

8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.039 Low

EPSS

Percentile

91.8%

JSON

The Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact by embedding a PNG file in a .ttf font file.

CPENameOperatorVersion
fedoraproject:fedorafedoraproject fedoraeq20
fedoraproject:fedorafedoraproject fedoraeq21
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq14.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq15.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq14.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq10.04
freetype:freetypefreetypele2.5.3
opensuse:opensuseopensuseeq13.1
opensuse:opensuseopensuseeq13.2

CPE	Name	Operator	Version
fedoraproject:fedora	fedoraproject fedora	eq	20
fedoraproject:fedora	fedoraproject fedora	eq	21
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	14.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	15.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	14.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	10.04
freetype:freetype	freetype	le	2.5.3
opensuse:opensuse	opensuse	eq	13.1
opensuse:opensuse	opensuse	eq	13.2