CVE-2014-9672: Buffer Overflow
Array index error in the parsefond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9672?
CVE-2014-9672 is considered a moderate severity vulnerability due to its potential for denial of service and information disclosure.
How do I fix CVE-2014-9672?
To fix CVE-2014-9672, upgrade FreeType to version 2.5.4 or later.
What types of systems are affected by CVE-2014-9672?
CVE-2014-9672 affects various systems including Oracle Solaris, Debian, and multiple versions of Ubuntu and openSUSE.
What kind of attack does CVE-2014-9672 enable?
CVE-2014-9672 enables attacks that can cause denial of service through out-of-bounds read vulnerabilities in specific Mac font files.
Is CVE-2014-9672 still relevant today?
While CVE-2014-9672 is an old vulnerability, it remains relevant for systems still using affected software versions.