Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2014-9656 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:47:41.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted OpenType font. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3188 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://code.g
entoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://code.google.com/p/google-security-research/issues/detail?id=196 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f0292bb9920aa1dbfed5f53861e7c7a89b35833a - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://lists.fedora
://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9657 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:02.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3188 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.or
lsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=eca0f067068020870a429fe91f6329e499390d55 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://code.google.com/p/google-security-research/is
sories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://code.google.com/p/google-security-research/issues/detail?id=195 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9658 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:03.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3188 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/o
/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://code.google.com/p/google-security-research/issues/detail?id=194 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f70d9342e65cd2cb44e9f26b6
ubuntu.com/usn/USN-2510-1 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f70d9342e65cd2cb44e9f26b6d7edeedf191fc6c - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9659 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:03.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2240. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/google-security-research/issues/detail?id=190 - https://security.gentoo.or
ainer: References: - http://code.google.com/p/google-security-research/issues/detail?id=190 - https://security.gentoo.org/glsa/201503-05 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.ubuntu.com/usn/USN-2510-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2cdc4562f873237f1c77d43540537c7a721d3fd8
CVE ID: CVE-2014-9660 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:02.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted BDF font. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3188 - http://code.google.com/p/google-security-research/issues/detail?id=188 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.co
google-security-research/issues/detail?id=188 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=af8346172a7b573715
://www.ubuntu.com/usn/USN-2510-1 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=af8346172a7b573715134f7a51e6c5c60fa7f2ab - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9661 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:02.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3188 - http://code.google.com/p/google-security-research/issues/detail?id=187 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=42fcd6693ec7b
ecurity-research/issues/detail?id=187 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=42fcd6693ec7bd6ffc65ddc63e74287a65dda669 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/
nce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://packetstormsecurity.com/files/134396/FreeType-2.5.3-Type42-Parsing-Use-After-Free.html - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=3788187e0c396952cd7d905c6c61f3ff8e84b2b4 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9662 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:02.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: cff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation functions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted OTF font. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=5f201ab5c24cb69bc96b724fd66e739928d6c5e2 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ub
4fd66e739928d6c5e2 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://code.google.com/p/google-security-research/issues/detail?id=185 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.ubuntu.com/usn/USN-2510-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9663 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:02.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted cmap SFNT table. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/google-security-research/issues/detail?id=184 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9bd20b7304aae61d
rity-research/issues/detail?id=184 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9bd20b7304aae61de5d50ac359cf27132bafd4c1 - http://www.debian.org/security/2015/dsa-3188 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?
ts.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9664 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:02.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted Type42 font, related to type42/t42parse.c and type1/t1load.c. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=dd89710f0f643eb0f99a3830e0712d26c7642acd - http://www.debian.org/security/2015/dsa-3188 - https://security.ge
commit/?id=dd89710f0f643eb0f99a3830e0712d26c7642acd - http://www.debian.org/security/2015/dsa-3188 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=73be9f9ab67842cfbec36ee99e8d2301434c84ca - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/sec
html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://code.google.com/p/google-security-research/issues/detail?id=183 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9665 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:04.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact by embedding a PNG file in a .ttf font file. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=54abd22891bd51ef8b533b24df53b3019b5cee81 - https://security.gentoo.org/glsa/2
org/cgit/freetype/freetype2.git/commit/?id=54abd22891bd51ef8b533b24df53b3019b5cee81 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b3500af717010137046ec4076d1e1c0641e33727 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.ubuntu.com/usn/USN-2510-1 - http://code.google.com/p/google-security-research/issues/detail?id=168 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9666 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:02.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted embedded bitmap. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3188 - http://code.google.com/p/google-security-research/issues/detail?id=167 - https://security.g
org/security/2015/dsa-3188 - http://code.google.com/p/google-security-research/issues/detail?id=167 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=257c270bd25e15890190a28a1456e7623bba4439 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.
ckage-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9667 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:04.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=677ddf4f1dc1b36cef7c7ddd59a14c508f4b1891 - http://www.debian.org/security/2015/dsa-3188 - https://security.gentoo.org/g
=677ddf4f1dc1b36cef7c7ddd59a14c508f4b1891 - http://www.debian.org/security/2015/dsa-3188 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://lists.fedoraproject.org/pipermail/p
urity/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html - http://code.google.com/p/google-security-research/issues/detail?id=166
CVE ID: CVE-2014-9668 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:02.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: The woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting length values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Web Open Font Format (WOFF) file. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/google-security-research/issues/detail?id=164 - https://security.gentoo.org/glsa/201503-05 - http
tp://code.google.com/p/google-security-research/issues/detail?id=164 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.ubuntu.com/usn/USN-2510-1 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f46add13895337ece929b18bb8f036431b3fb538 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9669 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:04.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3188 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=602040b1112c9f94d68e200be59ea7ac3d104565 - http://code.google.com/p/google-security-research/issues/detail?id=163 - h
id=602040b1112c9f94d68e200be59ea7ac3d104565 - http://code.google.com/p/google-security-research/issues/detail?id=163 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://lists.f
http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9670 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:04.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/google-security-research/issues/detail?id=158 - http://www.debian.org/security/2015/dsa-3188 - https://security.gentoo.or
oogle-security-research/issues/detail?id=158 - http://www.debian.org/security/2015/dsa-3188 - https://security.gentoo.org/glsa/201503-05 - http://www.securityfocus.com/bid/72986 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=ef1eba75187adfac750f326b563fe543dd5ff4e6 - http://www.ubuntu.com/usn/USN-2739-1 - http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html - http://advisories.mageia.org/MGASA-2015-0083.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - http://rhn.redhat.com/errata/RHSA-2015-0696.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/a
http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html - http://www.mandriva.com/security/advisories?name=MDVSA-2015:055 - http://www.ubuntu.com/usn/USN-2510-1 - http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html
CVE ID: CVE-2014-9671 State: PUBLISHED Published: 2015-02-08T11:00:00 Last Updated: 2024-08-06T13:55:03.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incremented. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2015/dsa-3188 - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0e2f5d518c60e2978f26400d110eff178fa7e3c3 - https://security.gentoo.org/gl