รายละเอียดของช่องโหว่นี้อยู่ด้านล่าง
26 December 2012
Severity: Medium
Description:
Several vulnerabilities were reported in FreeType. A remote user can cause arbitrary code to be executed on the target user's system.A remote user can create a specially crafted font file that, when loaded by the target user, will execute arbitrary code on the target system. The code will run with the privileges of the target user or application.
A null pointer dereference can be triggered in bdf_free_font()
[CVE-2012-5668].
An out-of-bounds read in can be triggered in _bdf_parse_glyphs()
[CVE-2012-5669].
An out-of-bounds write can be triggered in _bdf_parse_glyphs()
[CVE-2012-5670].
Impact:
A remote user can create a font file that, when loaded by the target user, will execute arbitrary code on the target user's system.Affected OS:
• Linux (Any),• UNIX (Any)
