CVE-2014-9667: Buffer Overflow
sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9667?
CVE-2014-9667 is classified as a high-severity vulnerability due to its potential for causing a denial of service.
How do I fix CVE-2014-9667?
To fix CVE-2014-9667, you should upgrade FreeType to version 2.5.4 or later.
Which software versions are affected by CVE-2014-9667?
CVE-2014-9667 affects FreeType versions prior to 2.5.4 and several Linux distributions like Debian 7.0, Ubuntu 10.04 to 15.04, and Fedora 20 and 21.
What type of impact can CVE-2014-9667 have on systems?
CVE-2014-9667 can lead to integer overflow and out-of-bounds read vulnerabilities, resulting in system instability or denial of service.
Is CVE-2014-9667 remotely exploitable?
Yes, CVE-2014-9667 can be exploited remotely, allowing attackers to disrupt services by sending crafted SFNT tables.