CVE:CVE-2014-9671
CNNVD:CNNVD-201502-151
FreeType是FreeType团队开发的一个基于C语言的、高质量的且可移植的开源字体引擎库，它可用来将字符栅格化并映射成位图以及提供其他字体相关业务的支持。
FreeType 2.5.4之前版本的pcf/pcfread.c文件中的‘pcf_get_properties’函数存在差一错误漏洞。远程攻击者可借助特制的PCF文件利用该漏洞造成拒绝服务（空指针逆向引用和应用程序崩溃）。
solution:Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_hpc_node to a higher version than 6,7.0,and avoid the version 6,7.0; Upgrade redhat enterprise_linux_hpc_node_eus to a higher version than 7.1,and avoid the version 7.1; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.6.z,7.1,and avoid the version 6.6.z,7.1; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,14.04,14.10,15.04,and avoid the version 10.04,12.04,14.04,14.10,15.04; Upgrade oracle solaris to a higher version than 10.0,11.2,and avoid the version 10.0,11.2; Upgrade opensuse opensuse to a higher version than 13.1,13.2,and avoid the version 13.1,13.2; Upgrade freetype freetype to a higher version than 2.5.3,and avoid the version (,2.5.3]