CVE-2014-9659: Buffer Overflow

Q: What is the severity of CVE-2014-9659?

CVE-2014-9659 has a critical severity level due to its potential for remote code execution and denial of service.

Q: How do I fix CVE-2014-9659?

To fix CVE-2014-9659, upgrade FreeType to version 2.5.4 or later.

Q: What exploit does CVE-2014-9659 enable?

CVE-2014-9659 enables remote attackers to execute arbitrary code or trigger a stack-based buffer overflow.

Q: Which software is affected by CVE-2014-9659?

CVE-2014-9659 affects FreeType versions prior to 2.5.4 and certain Oracle Solaris, Fedora, openSUSE, and Ubuntu versions.

Q: Can CVE-2014-9659 be exploited using crafted fonts?

Yes, CVE-2014-9659 can be exploited by attackers using specially crafted OpenType fonts.

Published Feb 8, 2015

Updated

cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2240.

Affected Software

12 affected components

Oracle Solaris=10.0

Oracle Solaris=11.2

FreeType FreeType<=2.5.3

Fedoraproject Fedora=20

Fedoraproject Fedora=21

openSUSE openSUSE=13.1

openSUSE openSUSE=13.2

Canonical Ubuntu Linux=10.04

Canonical Ubuntu Linux=12.04

Canonical Ubuntu Linux=14.04

Canonical Ubuntu Linux=14.10

Canonical Ubuntu Linux=15.04

Remediation

Patch Available

http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2cdc4562f873237f1c77d43540537c7a721d3fd8

Event History

Feb 8, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-9659?

CVE-2014-9659 has a critical severity level due to its potential for remote code execution and denial of service.

How do I fix CVE-2014-9659?