Heap-Based Buffer Overflow

🗓️ 02 May 2019 05:39:12Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 25 Views

FreeType font engine vulnerable to multiple heap-based buffer overflow

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 166
Veracode	NULL Pointer Dereference	2 May 201905:12	–	veracode
Veracode	Integer Overflow	2 May 201905:12	–	veracode
Veracode	Integer Overflow	2 May 201905:12	–	veracode
Veracode	Integer Overflow	2 May 201905:12	–	veracode
Veracode	Out-Of-Bounds Read	2 May 201905:12	–	veracode
Veracode	Denial Of Service (DoS)	2 May 201905:12	–	veracode
Veracode	Out-Of-Bounds Read	2 May 201905:12	–	veracode
Veracode	Denial Of Service (DoS)	2 May 201905:12	–	veracode
Veracode	Null Pointer Dereference	2 May 201905:12	–	veracode
Veracode	Out-Of-Bounds Read	2 May 201905:12	–	veracode

Vulners

Node

freetype freetypeMatch2.3.11_6.el6_0.2

freetype freetypeMatch2.3.11_6.el6_1.6

freetype freetypeMatch2.3.11_14.el6_3.1

freetype freetypeMatch2.3.11_6.el6_1.7

freetype freetypeMatch2.3.11_6.el6_0.1

freetype freetypeMatch2.3.11_6.el6_2.9

freetype freetypeMatch2.3.11_5.el6

freetype freetypeMatch2.3.11_6.el6_1.8

Source	Link
securityfocus	www.securityfocus.com/bid/72986
rhn	www.rhn.redhat.com/errata/RHSA-2015-0696.html
access	www.access.redhat.com/security/updates/classification/
debian	www.debian.org/security/2015/dsa-3188
security	www.security.gentoo.org/glsa/201503-05
advisories	www.advisories.mageia.org/MGASA-2015-0083.html
code	www.code.google.com/p/google-security-research/issues/detail
git	www.git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/
oracle	www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
mandriva	www.mandriva.com/security/advisories

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo