CVE-2014-9675

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.

Weaknesses (CWE)

CWE-264

Affected Products (22)

canonical · ubuntu_linuxvulnerable

freetype · freetypevulnerable

debian · debian_linuxvulnerable

fedoraproject · fedoravulnerable

redhat · enterprise_linux_desktopvulnerable

redhat · enterprise_linux_hpc_nodevulnerable

redhat · enterprise_linux_hpc_node_eusvulnerable

redhat · enterprise_linux_servervulnerable

redhat · enterprise_linux_server_eusvulnerable

redhat · enterprise_linux_workstationvulnerable

opensuse · opensusevulnerable

References (20)

http://advisories.mageia.org/MGASA-2015-0083.html

Third Party Advisory

http://code.google.com/p/google-security-research/issues/detail?id=151

Exploit

http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2c4832d30939b45c05757f0a05128ce64c4cacc7

Issue Tracking

http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2015-0696.html

Third Party Advisory

http://www.debian.org/security/2015/dsa-3188

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2015:055

Third Party Advisory

http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Third Party Advisory

http://www.securityfocus.com/bid/72986

http://www.ubuntu.com/usn/USN-2510-1

Third Party Advisory

http://www.ubuntu.com/usn/USN-2739-1

Third Party Advisory

https://security.gentoo.org/glsa/201503-05

https://source.android.com/security/bulletin/2016-11-01.html

http://advisories.mageia.org/MGASA-2015-0083.html

Third Party Advisory

http://code.google.com/p/google-security-research/issues/detail?id=151

Exploit

http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2c4832d30939b45c05757f0a05128ce64c4cacc7

Issue Tracking

http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html

Third Party Advisory