Oval Definition:oval:com.ubuntu.trusty:def:20149671000
Revision Date:2015-02-08Version:1
Title:CVE-2014-9671 on Ubuntu 14.04 LTS (trusty) - medium.
Description:Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incremented.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-9671
Platform(s):Ubuntu 14.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 14.04 LTS (trusty) is installed.
  • AND The 'freetype' package in trusty was vulnerable but has been fixed (note: '2.5.2-1ubuntu2.4').
    • BACK