PT-2015-4346

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to an integer signedness error in the Mac Read POST Resource function in base/ftobjs.c. This error can be exploited by remote attackers using a crafted Mac font, potentially...

freetype: buffer overflow vulnerability

Buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment...

freetype: heap buffer overflow vulnerability when processing certain font files

Heap-based buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file...