PT-2019-7341 · Freetype+4 · Freetype+4

Kcc + 1 · Published 2016-01-13 · Updated 2019-12-24 · CVE-2015-9382

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.6.1

Description The issue is related to a buffer over-read in the skip comment function in psaux/psobjs.c. This occurs because ps parser skip PS token is mishandled during an FT New Memory Face operation.

Recommendations For versions prior to 2.6.1, update to version 2.6.1 or later to resolve the issue.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2016-1019

CESA-2018_3140

CESA-2019_4254

CVE-2015-9382

DLA-1909-1

RHSA-2018:3140

RHSA-2018_3140

RHSA-2019:4254

RHSA-2019_4254

USN-4126-2

Affected Products

Alt Linux

Centos

Freetype

Red Hat

Ubuntu

References · 677

• 🔥 https://github.com/Metnew/uxss-db/tree/master/webkit/CVE-2018-4204 · Exploit
• 🔥 https://github.com/mwrlabs/CVE-2018-4121 · Exploit
• 🔥 https://github.com/FSecureLABS/CVE-2018-4121 · Exploit
• 🔥 https://savannah.nongnu.org/bugs/?45922 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10767 · Security Note
• https://ubuntu.com/security/CVE-2015-9381 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13988 · Security Note
• https://access.redhat.com/errata/RHSA-2019:4254 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9381 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11712 · Security Note
• https://osv.dev/vulnerability/USN-4126-2 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/freetype · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4126-2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2862 · Security Note
• https://usn.ubuntu.com/4126-2 · Vendor Advisory