Denial Of Service (DoS)

2020-04-1000:48:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

freetype is vulnerable to denial of service (DoS). The vulnerability exists as a stack overflow flaw was found in the way the FreeType font rendering engine processed PostScript Type 1 font files that contain nested Standard Encoding Accented Character (seac) calls. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash.

CPENameOperatorVersion
freetypeeq2.2.1__21.el5_3
freetypeeq2.1.4__12.el3
freetypeeq2.1.4__5.el3
freetypeeq2.1.9__10.el4.7
freetypeeq2.1.9__7.el4.6
freetypeeq2.1.9__8.el4.6
freetypeeq2.2.1__20.el5_2
freetypeeq2.2.1__19.el5
freetypeeq2.1.4__6.el3
freetypeeq2.1.9__4.el4

Name	Operator	Version
freetype	eq	2.2.1__21.el5_3
freetype	eq	2.1.4__12.el3
freetype	eq	2.1.4__5.el3
freetype	eq	2.1.9__10.el4.7
freetype	eq	2.1.9__7.el4.6
freetype	eq	2.1.9__8.el4.6
freetype	eq	2.2.1__20.el5_2
freetype	eq	2.2.1__19.el5
freetype	eq	2.1.4__6.el3
freetype	eq	2.1.9__4.el4