Lucene search
RootSSV:61739HistoryMar 11, 2014 - 12:00 a.m.
FreeType 'src/cff/cf2ft.c'远程拒绝服务漏洞
2014-03-1100:00:00
Root
www.seebug.org
9
0.011 Low
EPSS
Percentile
82.8%
BUGTRAQ ID: 66292
CVE ID:CVE-2014-2241
FreeType是一个流行的字体函数库。
FreeType 'src/cff/cf2ft.c’中的cf2_initLocalRegionBuffer,
cf2_initGlobalRegionBuffer函数存在一个断言失败错误，允许攻击者利用漏洞构建恶意字体，诱使应用解析，可使应用程序崩溃。
0
FreeType < 2.5.3
厂商补丁：
FreeType
用户可参考厂商的GIT库以获得补丁修复此漏洞：
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=135c3faebb96f8f550bd4f318716f2e1e095a969
Related
prion
prion
Design/Logic Flaw
2014-03-18 17:04:00
ubuntucve
ubuntucve
CVE-2014-2241
2014-03-12 00:00:00
cve
cve
CVE-2014-2241
2014-03-18 17:04:00
debiancve
debiancve
CVE-2014-2241
2014-03-18 17:04:00
cvelist
cvelist
CVE-2014-2241
2014-03-18 14:00:00
securityvulns
securityvulns
FreeType memory corruption
2014-03-18 00:00:00
[USN-2148-1] FreeType vulnerabilities
2014-03-18 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: mingw-freetype-2.5.4-1.fc20
2015-01-02 05:04:19
[SECURITY] Fedora 19 Update: mingw-freetype-2.4.12-3.fc19
2014-06-10 02:59:37
[SECURITY] Fedora 20 Update: mingw-freetype-2.5.0.1-2.fc20
2014-06-10 03:12:07
openvas
openvas
Ubuntu Update for freetype USN-2148-1
2014-03-20 00:00:00
Fedora Update for mingw-freetype FEDORA-2014-6830
2014-06-17 00:00:00
Ubuntu: Security Advisory (USN-2148-1)
2014-03-20 00:00:00
ubuntu
ubuntu
FreeType vulnerabilities
2014-03-17 00:00:00
mageia
mageia
Updated freetype2 packages fix security vulnerabilities
2014-03-15 20:26:54
nessus
nessus
Fedora 19 : mingw-freetype-2.4.12-3.fc19 (2014-6833)
2014-06-10 00:00:00
Fedora 20 : mingw-freetype-2.5.0.1-2.fc20 (2014-6830)
2014-06-10 00:00:00
Ubuntu 13.10 : freetype vulnerabilities (USN-2148-1)
2014-03-18 00:00:00