FreeType 'cff/cf2intrp.c' Incomplete Fix Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	72987
Class:	Boundary Condition Error
CVE:	CVE-2014-9659
Remote:	Yes
Local:	No
Published:	Nov 24 2014 12:00AM
Updated:	Aug 10 2016 02:00PM
Credit:	Vasyl Kaigorodov
Vulnerable:	Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 IBM Flex System Manager 1.3.2 0 IBM Flex System Manager 1.3.4.0 IBM Flex System Manager 1.3.3.0 Gentoo Linux FreeType FreeType 2.4.12 FreeType FreeType 2.4.7 FreeType FreeType 2.4.5 FreeType FreeType 2.4.3 FreeType FreeType 2.4.2 FreeType FreeType 2.4 FreeType FreeType 2.3.9 FreeType FreeType 2.3.6 FreeType FreeType 2.3.5 FreeType FreeType 2.3.4 FreeType FreeType 2.3.3 FreeType FreeType 2.2.10 FreeType FreeType 2.2.1 + OpenPKG OpenPKG E1.0-Solid + Trustix Secure Linux 3.0.5 + Trustix Secure Linux 3.0 + Trustix Secure Linux 2.2 FreeType FreeType 2.1.10 FreeType FreeType 2.1.9 FreeType FreeType 2.1.8 rc1 FreeType FreeType 2.1.8 rc1 FreeType FreeType 2.1.7 FreeType FreeType 2.0.9 FreeType FreeType 2.0.6 FreeType FreeType 2.5.3 FreeType FreeType 2.5.2 FreeType FreeType 2.5.1 FreeType FreeType 2.5 FreeType FreeType 2.4.9 FreeType FreeType 2.4.8 FreeType FreeType 2.4.7 FreeType FreeType 2.4.6 FreeType FreeType 2.4.5 FreeType FreeType 2.4.4 FreeType FreeType 2.4.3 FreeType FreeType 2.4.11 FreeType FreeType 2.4.10 FreeType FreeType 2.4.1 FreeType FreeType 2.4.0 FreeType FreeType 2.3.8 FreeType FreeType 2.3.7 FreeType FreeType 2.3.2 FreeType FreeType 2.3.12 FreeType FreeType 2.3.11 FreeType FreeType 2.3.10 FreeType FreeType 2.3.1 FreeType FreeType 2.3.0 FreeType FreeType 2.2.1 FreeType FreeType 2.2 FreeType FreeType 2.2 FreeType FreeType 2.1.9 FreeType FreeType 2.1.8 FreeType FreeType 2.1.7 FreeType FreeType 2.1.6 FreeType FreeType 2.1.5 FreeType FreeType 2.1.4 FreeType FreeType 2.1.3 FreeType FreeType 2.1.10 FreeType FreeType 2.1 FreeType FreeType 2.0.9 FreeType FreeType 2.0.8 FreeType FreeType 2.0.7 FreeType FreeType 2.0.5 FreeType FreeType 2.0.4 FreeType FreeType 2.0.3 FreeType FreeType 2.0.2 FreeType FreeType 2.0.1 FreeType FreeType 2.0 FreeType FreeType 1.3.1
Not Vulnerable:	FreeType FreeType 2.5.4

FreeType 'cff/cf2intrp.c' Incomplete Fix Remote Stack Buffer Overflow Vulnerability

FreeType is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Versions prior to FreeType 2.5.4 are vulnerable.

FreeType 'cff/cf2intrp.c' Incomplete Fix Remote Stack Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FreeType 'cff/cf2intrp.c' Incomplete Fix Remote Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

FreeType 'cff/cf2intrp.c' Incomplete Fix Remote Stack Buffer Overflow Vulnerability

References:

• FreeType 2.5.3 Changelog (FreeType)
  
• FreeType Homepage (FreeType)
  
• freetype: stack-based buffer overflow in cff/cf2intrp.c in the CFF CharString in (Red Hat)
  
• Security Bulletin: IBM Flex System Manager (FSM) is affected by multiple freetyp (IBM)