Beveiligingsadvies

CVE-2016-5384

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-08-12 16:00:00
Laatst bijgewerkt 2024-08-06 01:00:59
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.