Mateusz Jurczyk discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges.
{ "binaries": [ { "binary_version": "2.5.2-1ubuntu2.4", "binary_name": "freetype2-demos" }, { "binary_version": "2.5.2-1ubuntu2.4", "binary_name": "libfreetype6" }, { "binary_version": "2.5.2-1ubuntu2.4", "binary_name": "libfreetype6-dev" } ], "availability": "No subscription required" }
{ "cves": [ { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9656" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9657" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9658" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9659" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9660" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9661" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9662" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9663" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9664" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9665" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9666" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9667" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9668" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9669" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9670" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9671" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9672" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9673" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9674" }, { "severity": [ { "type": "Ubuntu", "score": "medium" } ], "id": "CVE-2014-9675" } ], "ecosystem": "Ubuntu:14.04:LTS" }