EUVD-2015-9221

Malware in sbrugna...

EUVD-2015-9130

Malware in sbrugna...

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. A buffer over-read in type1/t1parse.c in the function T1GetPrivateDict allows an attacker to execute arbitrary code on the host OS...

NewStart CGSL MAIN 4.05 : freetype Multiple Vulnerabilities (NS-SA-2020-0015)

The remote NewStart CGSL host, running version MAIN 4.05, has freetype packages installed that are affected by multiple vulnerabilities: - FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c. CVE-2015-9381 - FreeType before 2.6.1 has a buffer over-read i...

Medium: freetype

Issue Overview: FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c. CVE-2015-9381 FreeType before 2.6.1 has a buffer over-read in skipcomment in psaux/psobjs.c because psparserskipPStoken is mishandled in an FTNewMemoryFace operation. CVE-2015-9382...

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. A heap-based buffer overflow in T1GetPrivateDict in type1/t1parse.c potentially allows a remote attacker to exploit the vulnerability to execute arbitrary code on the system...

Denial Of Service (DoS)

Freetype is vulnerable to denial of service DoS. It lacks the checking to control multiple request streams and continual shuffling of the priority of the streams in T1GetPrivateDict in type1/t1parse.c, consuming resources causing substantial churn to the priority tree and exceeding the limit...

CVE-2015-9381

FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c...

Heap overflow

FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c...

CVE-2015-9381

FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c...

CVE-2015-9381

FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c...

CVE-2015-9381

FreeType before 2.6.1 has a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c...

CVE-2015-9290

In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1GetPrivateDict where there is no check that the new values of cur and limit are sensible before going to Again...