CVE-2014-9673

2015-02-0800:00:00

ubuntu.com

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

0.034

Percentile

91.5%

JSON

Integer signedness error in the Mac_Read_POST_Resource function in
base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a
denial of service (heap-based buffer overflow) or possibly have unspecified
other impact via a crafted Mac font.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfreetype< 2.3.11-1ubuntu2.8UNKNOWN
ubuntu12.04noarchfreetype< 2.4.8-1ubuntu2.2UNKNOWN
ubuntu14.04noarchfreetype< 2.5.2-1ubuntu2.4UNKNOWN
ubuntu14.10noarchfreetype< 2.5.2-2ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	freetype	< 2.3.11-1ubuntu2.8	UNKNOWN
ubuntu	12.04	noarch	freetype	< 2.4.8-1ubuntu2.2	UNKNOWN
ubuntu	14.04	noarch	freetype	< 2.5.2-1ubuntu2.4	UNKNOWN
ubuntu	14.10	noarch	freetype	< 2.5.2-2ubuntu1.1	UNKNOWN