USN-3063-1: Fontconfig vulnerability

Tobias Stoeckmann discovered that Fontconfig incorrectly handled cache files. A local attacker could possibly use this issue with a specially crafted cache file to elevate privileges...

CVE-2016-5384

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file...

CVE-2016-5384

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file...

DEBIAN-CVE-2016-5384

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file...

Double free

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file...

CVE-2016-5384

fontconfig contains a vulnerability (CVE-2016-5384) due to unchecked cache offsets, allowing a local attacker to trigger arbitrary free calls and potentially execute code via a crafted cache file. Reports from multiple vendors describe the flaw as a local privilege scenario with possible arbitrar...

CVE-2016-5384

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file...

CVE-2016-5384

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file...

Fontconfig Arbitrary Code Execution Vulnerability

fontconfig is a library of functions that provide system-wide font settings, customization and allow applications to access them. An arbitrary code execution vulnerability exists in fontconfig, which can be exploited to trigger an arbitrary free call, which can lead to a double free attack to...

Debian DLA-587-1 : fontconfig security update

A possible double free vulnerability was found in fontconfig. The problem was due to insufficient validation when parsing the cache file. For Debian 7 'Wheezy', these problems have been fixed in version 2.9.0-7.1+deb7u1. We recommend that you upgrade your fontconfig packages. NOTE: Tenable Networ...

[SECURITY] [DLA 587-1] fontconfig security update

Package : fontconfig Version : 2.9.0-7.1+deb7u1 CVE ID : CVE-2016-5384 Debian Bug : 833570 A possible double free vulnerability was found in fontconfig. The problem was due to insufficient validation when parsing the cache file. For Debian 7 "Wheezy", these problems have been fixed in version...

Debian DSA-3644-1 : fontconfig - security update

Tobias Stoeckmann discovered that cache files are insufficiently validated in fontconfig, a generic font configuration library. An attacker can trigger arbitrary free calls, which in turn allows double free attacks and therefore arbitrary code execution. In combination with setuid binaries using...

Fedora 24 : fontconfig (2016-e23ab56ce3)

Security fix for CVE-2016-5384 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora Update for fontconfig FEDORA-2016-e23ab56ce3

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 24 Update: fontconfig-2.11.94-7.fc24

Fontconfig is designed to locate fonts within the system and select them according to requirements specified by applications...

[SECURITY] [DSA 3644-1] fontconfig security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3644-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 08, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3644-1] fontconfig security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3644-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 08, 2016 https://www.debian.org/security/faq -...

PT-2016-6398 · Fontconfig +5 · Fontconfig +5

Name of the Vulnerable Software and Affected Versions: fontconfig versions prior to 2.12.1 Description: The issue allows local users to trigger arbitrary free calls and conduct double free attacks, potentially leading to the execution of arbitrary code. This can be achieved via a crafted cache...

UBUNTU-CVE-2016-5384

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file...

Debian Security Advisory DSA 3644-1 (fontconfig - security update)

Tobias Stoeckmann discovered that cache files are insufficiently validated in fontconfig, a generic font configuration library. An attacker can trigger arbitrary free calls, which in turn allows double free attacks and therefore arbitrary code execution. In combination with setuid binaries using...