Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-2240
HistoryMar 12, 2014 - 12:00 a.m.

CVE-2014-2240

2014-03-1200:00:00
ubuntu.com
ubuntu.com
7

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.139 Low

EPSS

Percentile

95.6%

JSON

Stack-based buffer overflow in the cf2_hintmap_build function in
cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a
denial of service (crash) and possibly execute arbitrary code via a large
number of stem hints in a font file.

Bugs

Notes

Author Note
seth-arnold see also CVE-2014-9659
OSVersionArchitecturePackageVersionFilename
ubuntu13.10noarchfreetype< 2.4.12-0ubuntu1.1UNKNOWN

Related

cvelist 2
ubuntucve 1
debiancve 2
prion 2
cve 2
f5 2
nessus 17
openvas 20
fedora 9
seebug 1
freebsd 1
mageia 2
gentoo 2
slackware 1
securityvulns 4
ubuntu 2
ibm 2
cvelist
cvelist
CVE-2014-9659
2015-02-08 11:00:00
CVE-2014-2240
2014-03-12 14:00:00
ubuntucve
ubuntucve
CVE-2014-9659
2015-02-08 00:00:00
debiancve
debiancve
CVE-2014-9659
2015-02-08 11:59:00
CVE-2014-2240
2014-03-12 14:55:00
prion
prion
Stack overflow
2015-02-08 11:59:00
Stack overflow
2014-03-12 14:55:00
cve
cve
CVE-2014-9659
2015-02-08 11:59:00
CVE-2014-2240
2014-03-12 14:55:00
f5
f5
K16380 : FreeType vulnerabilities CVE-2014-9656 and CVE-2014-9659
2015-04-09 00:00:00
SOL16380 - FreeType vulnerabilities CVE-2014-9656 and CVE-2014-9659
2015-04-09 00:00:00
nessus
nessus
Fedora 20 : freetype-2.5.0-7.fc20 (2014-16854)
2015-01-05 00:00:00
Fedora 21 : mingw-freetype-2.5.4-1.fc21 (2014-17550)
2015-01-02 00:00:00
FreeBSD : freetype -- Out of bounds stack-based read/write (567beb1e-7e0a-11e4-b9cc-bcaec565249c)
2014-12-08 00:00:00
openvas
openvas
Fedora Update for freetype FEDORA-2014-16840
2015-01-05 00:00:00
Fedora Update for mingw-freetype FEDORA-2014-17550
2015-01-05 00:00:00
Mageia: Security Advisory (MGASA-2014-0526)
2022-01-28 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: mingw-freetype-2.5.4-1.fc21
2015-01-02 05:01:40
[SECURITY] Fedora 21 Update: freetype-2.5.3-13.fc21
2014-12-23 18:31:38
[SECURITY] Fedora 20 Update: mingw-freetype-2.5.4-1.fc20
2015-01-02 05:04:19
seebug
seebug
FreeType 'src/cff/cf2hints.c'远程栈缓冲区溢出漏洞
2014-03-11 00:00:00
freebsd
freebsd
freetype -- Out of bounds stack-based read/write
2014-12-07 00:00:00
mageia
mageia
Updated freetype2 packages fix security vulnerability
2014-12-13 23:16:05
Updated freetype2 packages fix security vulnerabilities
2014-03-15 20:26:54
gentoo
gentoo
FreeType: Arbitrary code execution
2014-08-09 00:00:00
FreeType: Multiple vulnerabilities
2015-03-08 00:00:00
slackware
slackware
[slackware-security] freetype
2015-01-17 06:43:52
securityvulns
securityvulns
FreeType memory corruption
2014-03-18 00:00:00
[USN-2148-1] FreeType vulnerabilities
2014-03-18 00:00:00
[USN-2510-1] FreeType vulnerabilities
2015-03-08 00:00:00
ubuntu
ubuntu
FreeType vulnerabilities
2014-03-17 00:00:00
FreeType vulnerabilities
2015-02-24 00:00:00
ibm
ibm
Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple freetype2 vulnerabilities
2018-06-18 01:32:58
Security Bulletin: Vulnerabilities in krb5, giflib and freetype2 affect IBM BladeCenter Advanced Management Module (AMM) and IBM Flex System Chassis Management Module (CMM)
2023-04-14 14:32:25

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.139 Low

EPSS

Percentile

95.6%

JSON
Related for UB:CVE-2014-2240
cvelist2ubuntucve1debiancve2prion2cve2f52nessus17openvas20fedora9seebug1freebsd1mageia2gentoo2slackware1securityvulns4ubuntu2ibm2