Sergey Gorbaty reported issues related to the FreeType font engine.
FreeType improperly handled certain malformed font files, allowing remote attackers to cause a Denial of Service when specially crafted font files were used.

For Debian 6 'Squeeze', these issues have been fixed in freetype version 2.4.2-2.1+squeeze6. We recommend you to upgrade your freetype packages.

Learn more about the Debian Long Term Support (LTS) Project and how to apply these updates at: https://wiki.debian.org/LTS/

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Sergey Gorbaty 氏が、FreeType フォントエンジンに関連する問題を報告しています。
FreeType によって特定の無効な形式のフォントファイルが不適切に処理されることにより、リモートの攻撃者が、特別に細工されたフォントファイルが使用されたときに、サービス拒否を引き起こせます。

Debian 6 「Squeeze」では、これらの問題は freetype バージョン 2.4.2-2.1+squeeze6 で修正されています。freetype パッケージをアップグレードすることを、お勧めします。

Debian Long Term Support（LTS）プロジェクト、およびこれらの更新を適用する方法の詳細：https://wiki.debian.org/LTS/

注：Tenable Network Security は、前述の記述ブロックを DLA セキュリティアドバイザリから直接抽出しています。Tenable では、できる限り新たな問題を持ち込まないように、自動的に整理して書式設定するようにしています。

FreeType が一部の無効な形式の入力を適切に処理しないことが判明しました。これにより、リモートの攻撃者は、細工されたフォントファイルを介して、サービス拒否（クラッシュ）を引き起こす可能性があります。

Sergey Gorbaty 報告與 FreeType 字型引擎有關的問題。
FreeType 不當處理特定格式錯誤的字型檔，進而讓遠端攻擊者在使用特製的字型檔時造成拒絕服務。

針對 Debian 6 ‘Squeeze’，這些問題已在 freetype 的 2.4.2-2.1+squeeze6 版本中修正。我們建議您升級 freetype 套件。

如需深入瞭解 Debian Long Term Support (LTS) 專案以及套用這些更新的方式，請造訪：https://wiki.debian.org/LTS/

注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

據發現，FreeType 未正確處理某些格式錯誤的輸入。這可允許遠端攻擊者透過特製的字型檔案造成拒絕服務 (當機)。

Sergey Gorbaty 报告了与 FreeType 字体引擎相关的若干问题。
FreeType 未正确处理某些畸形字体文件，从而允许远程攻击者在使用了特别构建的字体文件时造成拒绝服务。

对于 Debian 6“Squeeze”，已在 freetype 版本 2.4.2-2.1+squeeze6 中修复这些问题。我们建议您升级 freetype 程序包。

有关 Debian 长期支持 (LTS) 项目以及如何应用这些更新的信息，请参阅 https://wiki.debian.org/LTS/

注意：Tenable Network Security 已直接从 DLA 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

已发现 FreeType 未正确处理某些畸形输入。这可允许远程攻击者通过构建的字体文件造成拒绝服务（崩溃）。

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - freetype: heap-based buffer overflow related to the t1_builder_close_contour function (CVE-2017-8287)

  - The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a     denial of service (infinite loop) via a broken number-with-base in a Postscript stream, as demonstrated     by 8#garbage. (CVE-2014-9745)

  - The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in     cid/cidload.c, (3) t42_parse_font_matrix function in type42/t42parse.c, and (4) ps_parser_load_field     function in psaux/psobjs.c in FreeType before 2.5.4 do not check return values, which allows remote     attackers to cause a denial of service (uninitialized memory access and application crash) or possibly     have unspecified other impact via a crafted font. (CVE-2014-9746)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - freetype: Use of uninitialized memory (CVE-2014-9746)

  - The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum     record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly     have unspecified other impact via a crafted TrueType font. (CVE-2014-9657)

  - The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum     table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly     have unspecified other impact via a crafted TrueType font. (CVE-2014-9658)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - freetype: Use of uninitialized memory (CVE-2014-9746)

  - FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer     dereference and crash) via vectors related to BDF fonts and the improper handling of an allocation error     in the bdf_free_font function. (CVE-2012-5668)

  - The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a     denial of service (infinite loop) via a broken number-with-base in a Postscript stream, as demonstrated     by 8#garbage. (CVE-2014-9745)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

It was discovered that FreeType did not properly handle some malformed inputs. This could allow remote attackers to cause a denial of service (crash) via crafted font files.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
86211	Debian DLA-319-1 : freetype security update	Nessus	Debian Local Security Checks	2015/10/1	2021/1/11	critical
86211	Debian DLA-319-1：freetype - セキュリティ更新	Nessus	Debian Local Security Checks	2015/10/1	2021/1/11	critical
86304	Debian DSA-3370-1：freetype - セキュリティ更新	Nessus	Debian Local Security Checks	2015/10/7	2021/1/11	critical
86211	Debian DLA-319-1：freetype 安全性更新	Nessus	Debian Local Security Checks	2015/10/1	2021/1/11	critical
86304	Debian DSA-3370-1：freetype - 安全性更新	Nessus	Debian Local Security Checks	2015/10/7	2021/1/11	critical
86211	Debian DLA-319-1：freetype 安全更新	Nessus	Debian Local Security Checks	2015/10/1	2021/1/11	critical
86304	Debian DSA-3370-1：freetype - 安全更新	Nessus	Debian Local Security Checks	2015/10/7	2021/1/11	critical
198633	RHEL 7 : freetype (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
198698	RHEL 5 : freetype (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
198605	RHEL 6 : freetype (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
86304	Debian DSA-3370-1 : freetype - security update	Nessus	Debian Local Security Checks	2015/10/7	2021/1/11	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical