CVE-2014-2978

Published: 11 June 2014

The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers an out-of-bounds write.

Notes

Reporter claims the vulnerability was introduced in 1.4.4

Status

References

• http://www.openwall.com/lists/oss-security/2014/05/15/10
• https://www.cve.org/CVERecord?id=CVE-2014-2978
• NVD
• Launchpad
• Debian