CVE-2016-5384
13.08.2016, 01:59
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fontconfig_project | fontconfig | 𝑥 < 2.12.1 |
| debian | debian_linux | 8.0 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| fontconfig |
| ||||||||||||||
| fontconfig-32bit |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References