CVE-2016-10244
Description
The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted file.
Risk Information
Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.334
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| FreeType 2 is a font engine library (USN-1686-1) libfreetype6_2.4.8-1ubuntu2.4_i386.deb | Linux |
| FreeType 2 is a font engine library (USN-1686-1) libfreetype6_2.4.8-1ubuntu2.4_amd64.deb | Linux |
| SUSE-SU-2018:0414-1(SUSE Linux Enterprise Desktop 12-SP2 ) freetype2-debugsource-2.6.3-7.15.1.x86_64.rpm | Linux |
| SUSE-SU-2018:0414-1(SUSE Linux Enterprise Desktop 12-SP2 ) ft2demos-2.6.3-7.15.1.x86_64.rpm | Linux |
| SUSE-SU-2018:0414-1(SUSE Linux Enterprise Desktop 12-SP2 ) libfreetype6-2.6.3-7.15.1.x86_64.rpm | Linux |
| SUSE-SU-2018:0414-1(SUSE Linux Enterprise Desktop 12-SP2 ) libfreetype6-32bit-2.6.3-7.15.1.x86_64.rpm | Linux |
| SUSE-SU-2018:0414-1(SUSE Linux Enterprise Desktop 12-SP2 ) libfreetype6-debuginfo-2.6.3-7.15.1.x86_64.rpm | Linux |
| SUSE-SU-2018:0414-1(SUSE Linux Enterprise Desktop 12-SP2 ) libfreetype6-debuginfo-32bit-2.6.3-7.15.1.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234