Please do not reply directly to this email. All additional comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=800598 Tomas Hoger <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|CVE-2012-1139 freetype: |CVE-2012-1139 freetype: |Array index error, leading |data buffer underflow in |to out-of stack based |BDF parser |buffer read by parsing BDF |_bdf_parse_glyphs() |font glyph information |(#35656) |(FU#35656) | Status Whiteboard|impact=low,public=20120228, |impact=low,public=20120228, |reported=20120302,source=go |reported=20120302,source=se |ogle,cvss2=4.3/AV:N/AC:M/Au |calert,cvss2=2.6/AV:N/AC:H/ |:N/C:N/I:N/A:P,rhel-5/freet |Au:N/C:N/I:N/A:P,rhel-5/fre |ype=new,rhel-6/freetype=new |etype=affected,rhel-6/freet |,fedora-all/freetype=new |ype=affected,fedora-all/fre | |etype=affected,fedora-all/m | |ingw32-freetype=affected --- Comment #2 from Tomas Hoger <[email protected]> 2012-03-19 10:24:20 EDT --- (In reply to comment #0) > An array index error, leading to out-of stack-based buffer read flaw Actually, it's not stack-based buffer, but a data segment one. Signed char variable is used to index the array, so it may lead to underflow / invalid array access up to 128 bytes before the beginning of the array. This is not very likely to trigger any crash, the problem is not reproducible with standard builds not using AddressSanitizer as was used by the reporter of the upstream bug. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. _______________________________________________ fonts-bugs mailing list [email protected] https://admin.fedoraproject.org/mailman/listinfo/fonts-bugs http://fonts.fedoraproject.org/
