CVE:CVE-2016-5384
CNNVD:CNNVD-201608-275
fontconfig是freedesktop开源的一种与字体相关的计算机程序库。
fontconfig 2.12.1之前版本存在资源管理错误漏洞，该漏洞源于程序没有验证偏移量。本地攻击者可借助特制的缓存文件利用该漏洞触发任意释放调用，实施双重释放攻击，执行任意代码。
solution:Upgrade fedoraproject fedora to a higher version than 23,24,and avoid the version 23,24; Upgrade fontconfig_project fontconfig to a higher version than 2.12.1,and avoid the version (,2.12.1); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,and avoid the version 12.04,14.04,16.04