CVE-2014-9675

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to…

published February 8, 2015

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04159 · 90.8th percentile
Published
2015-02-08T11:00Z
EPSS history
Timeline
  • 08 FEB 11:00Z
    bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to…
    cvelistv5