CVE-2016-5384
EUVD-2016-633413.08.2016, 01:59
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fontconfig_project | fontconfig | 𝑥 < 2.12.1 |
| debian | debian_linux | 8.0 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References