CVE-2014-2977: Buffer Overflow
Multiple integer signedness errors in the DispatchWrite function in proxy/dispatcher/idirectfbsurfacedispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2977?
CVE-2014-2977 has a medium severity rating, as it can lead to denial of service and potential remote code execution.
How do I fix CVE-2014-2977?
To fix CVE-2014-2977, update your DirectFB to a version above 1.4.13 or apply the security patches provided by your operating system vendor.
Which software is affected by CVE-2014-2977?
CVE-2014-2977 affects DirectFB 1.4.13 and several versions of openSUSE and SUSE Linux Enterprise products.
What type of vulnerability is CVE-2014-2977?
CVE-2014-2977 is categorized as an integer signedness error that can lead to buffer overflow vulnerabilities.
Can CVE-2014-2977 be exploited remotely?
Yes, CVE-2014-2977 can be exploited remotely via the Voodoo interface, resulting in a denial of service or potential arbitrary code execution.