FreeType 'src/cff/cf2hints.c' Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	66074
Class:	Boundary Condition Error
CVE:	CVE-2014-2240
Remote:	Yes
Local:	No
Published:	Mar 10 2014 12:00AM
Updated:	Apr 13 2015 09:37PM
Credit:	Mateusz "j00ru" Jurczyk
Vulnerable:	Ubuntu Ubuntu Linux 13.10 Gentoo Linux FreeType FreeType 2.4.12 FreeType FreeType 2.4.7 FreeType FreeType 2.4.5 FreeType FreeType 2.4.3 FreeType FreeType 2.4.2 FreeType FreeType 2.4 FreeType FreeType 2.3.9 FreeType FreeType 2.3.6 FreeType FreeType 2.3.5 FreeType FreeType 2.3.4 FreeType FreeType 2.3.3 FreeType FreeType 2.2.10 FreeType FreeType 2.2.1 + OpenPKG OpenPKG E1.0-Solid + Trustix Secure Linux 3.0.5 + Trustix Secure Linux 3.0 + Trustix Secure Linux 2.2 FreeType FreeType 2.1.10 FreeType FreeType 2.1.9 FreeType FreeType 2.1.8 rc1 FreeType FreeType 2.1.8 rc1 FreeType FreeType 2.1.7 FreeType FreeType 2.0.9 FreeType FreeType 2.0.6 FreeType FreeType 2.5.2 FreeType FreeType 2.5.1 FreeType FreeType 2.5 FreeType FreeType 2.4.9 FreeType FreeType 2.4.8 FreeType FreeType 2.4.7 FreeType FreeType 2.4.6 FreeType FreeType 2.4.5 FreeType FreeType 2.4.4 FreeType FreeType 2.4.3 FreeType FreeType 2.4.11 FreeType FreeType 2.4.10 FreeType FreeType 2.4.1 FreeType FreeType 2.4.0 FreeType FreeType 2.3.8 FreeType FreeType 2.3.7 FreeType FreeType 2.3.2 FreeType FreeType 2.3.12 FreeType FreeType 2.3.11 FreeType FreeType 2.3.10 FreeType FreeType 2.3.1 FreeType FreeType 2.3.0 FreeType FreeType 2.2.1 FreeType FreeType 2.2 FreeType FreeType 2.2 FreeType FreeType 2.1.9 FreeType FreeType 2.1.8 FreeType FreeType 2.1.7 FreeType FreeType 2.1.6 FreeType FreeType 2.1.5 FreeType FreeType 2.1.4 FreeType FreeType 2.1.3 FreeType FreeType 2.1.10 FreeType FreeType 2.1 FreeType FreeType 2.0.9 FreeType FreeType 2.0.8 FreeType FreeType 2.0.7 FreeType FreeType 2.0.5 FreeType FreeType 2.0.4 FreeType FreeType 2.0.3 FreeType FreeType 2.0.2 FreeType FreeType 2.0.1 FreeType FreeType 2.0 FreeType FreeType 1.3.1
Not Vulnerable:	FreeType FreeType 2.5.3

FreeType 'src/cff/cf2hints.c' Remote Stack Buffer Overflow Vulnerability

FreeType is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Versions prior to FreeType 2.5.3 are vulnerable.

FreeType 'src/cff/cf2hints.c' Remote Stack Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FreeType 'src/cff/cf2hints.c' Remote Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

FreeType 'src/cff/cf2hints.c' Remote Stack Buffer Overflow Vulnerability

References:

• Bugs: bug #41697, Out-of-bounds stack-based... (Mateusz)
  
• FreeType 2.5.3 Changelog (FreeType)
  
• FreeType Homepage (FreeType)