Published: 03/09/2019 Updated: 10/09/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

FreeType prior to 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freetype freetype
debian debian linux 8.0

Synopsis Moderate: freetype security update Type/Severity Security Advisory: Moderate Topic An update for freetype is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, ...

FreeType could be made to expose sensitive information if it opened a specially crafted font file ...

FreeType before 261 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parsec (CVE-2015-9381) FreeType before 261 has a buffer over-read in skip_comment in psaux/psobjsc because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation (CVE-2015-9382) ...

CWE-125 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/psaux/psobjs.c?id=db5a4a9ae7b0048f033361744421da8569642f73 https://savannah.nongnu.org/bugs/?45922 https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html https://usn.ubuntu.com/4126-2/https://access.redhat.com/errata/RHSA-2019:4254 https://access.redhat.com/errata/RHSA-2019:4254 https://usn.ubuntu.com/4126-2/https://nvd.nist.gov

CVE-2015-9382

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect