Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document with a crafted embedded font.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeType ttinterp.c文件Ins_SHZ函数栈缓冲区错误漏洞
Vulnerability Description
FreeType 是一个流行的字体函数库。 FreeType 2.4.3以及之前版本中的ttinterp.c文件中的Ins_SHZ函数中存在基于栈的缓冲区溢出漏洞。远程攻击者可以特制SHZ字节码指令导致拒绝服务(应用程序崩溃)。该漏洞已经通过带有特制嵌入字体的PDF文档得到证实。
CVSS Information
N/A
Vulnerability Type
N/A