CVE-2012-5669

Description

The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read.

References

https://savannah.nongnu.org/bugs/?37906

http://www.ubuntu.com/usn/USN-1686-1

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.520186

http://www.securitytracker.com/id?1027921

http://www.openwall.com/lists/oss-security/2012/12/25/2

http://www.freetype.org/

http://secunia.com/advisories/51900

http://secunia.com/advisories/51826

http://rhn.redhat.com/errata/RHSA-2013-0216.html

http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html

http://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html

http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html

http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=07bdb6e289c7954e2a533039dc93c1c136099d2d

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS