REDHAT-BUG-800584: Null Pointer Dereference
A NULL pointer dereference flaw as found in the way TrueType bytecode interpreter of the FreeType font rendering engine performed movement of the zone2 pointer point for certain TrueType fonts. A remote attacker could provide a specially-crafted TrueType font file, which once opened in an application linked against FreeType would lead to that application crash.
Upstream bug report: [1] https://savannah.nongnu.org/bugs/?35601
Upstream patch: [2] http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=96cddb8d1d32d6738b06552083db9d6cee5b5cb4
Acknowledgements:
Red Hat would like to thank Mateusz Jurczyk of the Google Security Team for reporting this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-800584?
The severity of REDHAT-BUG-800584 is categorized as low.
What type of vulnerability is REDHAT-BUG-800584?
REDHAT-BUG-800584 is a NULL pointer dereference flaw.
How can REDHAT-BUG-800584 be exploited?
A remote attacker could exploit REDHAT-BUG-800584 by providing a specially-crafted TrueType font file.
What software is affected by REDHAT-BUG-800584?
The affected software for REDHAT-BUG-800584 is the GNU FreeType font rendering engine.
What impact does REDHAT-BUG-800584 have on applications?
REDHAT-BUG-800584 can cause applications to crash when processing malicious TrueType font files.