Summary
It was discovered that a heap-based buffer overflow existed in the
FreeType library. If a user were tricked into using a specially
crafted font file, a remote attacker could cause FreeType to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | freetype | 2.5.2-1ubuntu2.7 |
| Ubuntu · 16.04 LTS 16.04:LTS | freetype | 2.6.1-0.1ubuntu2.2 |
Vulnerabilities 1
-
Unscored —
FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cff_parse…
References
-
report
https://ubuntu.com/security/CVE-2016-10328