Summary
It was discovered that FreeType did not correctly handle certain malformed
font files. If a user were tricked into using a specially crafted font
file, a remote attacker could cause FreeType to crash, resulting in a
denial of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | freetype | 2.5.2-1ubuntu2.6 |
| Ubuntu · 16.04 LTS 16.04:LTS | freetype | 2.6.1-0.1ubuntu2.1 |
Vulnerabilities 1
-
Unscored —
The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph …
References
-
report
https://ubuntu.com/security/CVE-2016-10244