CVE-2014-9747

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4

Description The issue concerns the t42 parse encoding function in type42/t42parse.c, which does not properly update the current position for immediates-only mode. This allows remote attackers to cause a denial of service, specifically an infinite loop, by providing a Type42 font.

Recommendations For versions prior to 2.5.4, update to version 2.5.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of Type42 fonts until the update is applied.