Lucene search
PRIOn knowledge basePRION:CVE-2014-9745HistorySep 14, 2015 - 8:59 p.m.
Code injection
2015-09-1420:59:00
PRIOn knowledge base
www.prio-n.com
5
The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a “broken number-with-base” in a Postscript stream, as demonstrated by 8#garbage.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 15.04 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 7.0 | |
| freetype | le | 2.5.2 | |
| opensuse | eq | 13.1 |
References
git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=df14e6c0b9592cbb24d5381dfc6106b14f915e75
lists.opensuse.org/opensuse-updates/2015-10/msg00017.html
savannah.nongnu.org/bugs/index.php?41590
www.debian.org/security/2015/dsa-3370
www.securityfocus.com/bid/76727
www.securitytracker.com/id/1033536
www.ubuntu.com/usn/USN-2739-1
bugs.launchpad.net/ubuntu/+source/freetype/+bug/1492124
code.google.com/p/chromium/issues/detail?id=459050
Related
openvas
openvas
Ubuntu: Security Advisory (USN-2739-1)
2015-09-11 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:1149-1)
2021-06-09 00:00:00
Debian: Security Advisory (DLA-319-1)
2023-03-08 00:00:00
f5
f5
K72372334 : FreeType vulnerability CVE-2014-9745
2016-09-28 00:00:00
SOL72372334 - FreeType vulnerability CVE-2014-9745
2016-09-28 00:00:00
debiancve
debiancve
CVE-2014-9745
2015-09-14 20:59:00
ubuntu
ubuntu
FreeType vulnerabilities
2015-09-10 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : FreeType vulnerabilities (USN-2739-1)
2015-09-11 00:00:00
openSUSE Security Update : freetype2 (openSUSE-2015-639)
2015-10-12 00:00:00
SUSE SLES11 Security Update : freetype2 (SUSE-SU-2016:1149-1)
2016-04-27 00:00:00
nvd
nvd
CVE-2014-9745
2015-09-14 20:59:00
cve
cve
CVE-2014-9745
2015-09-14 20:59:00
cvelist
cvelist
CVE-2014-9745
2015-09-14 20:00:00
ubuntucve
ubuntucve
CVE-2014-9745
2015-09-14 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3370-1] freetype security update
2015-10-11 00:00:00
FreeType DoS
2015-10-11 00:00:00
debian
debian
[SECURITY] [DLA 319-1] freetype security update
2015-09-30 07:06:52
[SECURITY] [DSA 3370-1] freetype security update
2015-10-06 21:52:34
ibm
ibm