PT-2019-7341 · Freetype+4 · Freetype+4

Kcc

+1

·

Publicado

2016-01-13

·

Atualizado

2019-12-24

·

CVE-2015-9382

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.6.1
Description The issue is related to a buffer over-read in the skip comment function in psaux/psobjs.c. This occurs because ps parser skip PS token is mishandled during an FT New Memory Face operation.
Recommendations For versions prior to 2.6.1, update to version 2.6.1 or later to resolve the issue.

Exploit

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2016-1019
CESA-2018_3140
CESA-2019_4254
CVE-2015-9382
DLA-1909-1
RHSA-2018:3140
RHSA-2018_3140
RHSA-2019:4254
RHSA-2019_4254
USN-4126-2

Produtos afetados

Alt Linux
Centos
Freetype
Red Hat
Ubuntu