CVE-2014-9675
Published: August 2, 2015
bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.
MEDIUM
CVSS v2: 5
CVSS v2: 5
Status
| DocFilters Release | Package | State | Justification | Comment |
|---|---|---|---|---|
| 25.1 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 24.4 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 24.4.0 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 24.3 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 24.2.1 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 24.2 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 24.1 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 23.3 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 23.2.1 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 23.2 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 23.1 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 22.4 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 22.3 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 22.2 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 22.1 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 21.11.1 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 21.11 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 21.8.1 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |
| 21.8 | freetype (2.6.5) | Not Affected | Code Not Present | 2.6.5 does not match CVE configuration. |