Summary
It was discovered that FreeType did not correctly handle certain malformed
font files. If a user were tricked into using a specially crafted font
file, a remote attacker could cause FreeType to crash, resulting in a
denial of service, or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | freetype | 2.5.2-1ubuntu2.8 |
| Ubuntu · 16.04 LTS 16.04:LTS | freetype | 2.6.1-0.1ubuntu2.3 |
Vulnerabilities 2
-
Unscored —
FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decode…
-
Unscored —
FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builde…