PT-2013-1223 · Freetype+1 · Freetype+1

J00Ru

+1

·

Publicado

2013-01-24

·

Atualizado

2024-06-15

·

CVE-2012-5668

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.4.11
Description The issue allows context-dependent attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This is related to the improper handling of an "allocation error" in the bdf free font function when dealing with BDF fonts. The vulnerability can be exploited remotely, potentially leading to a disruption in the availability of protected information.
Recommendations For versions prior to 2.4.11, update to version 2.4.11 or later to resolve the issue. As a temporary workaround, consider restricting the use of BDF fonts until a patch is available.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-09722
CVE-2012-5668
OPENSUSE-SU-2024:10172-1
OPENSUSE-SU-2024:10438-1
SUSE-SU-2013_0195-1
SUSE-SU-2013_0196-1

Produtos afetados

Freetype
Suse