CVE-2014-2977
HighSummary
Multiple integer signedness errors in the Dispatch_Write function in DirectFB 1.4.13 may allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, leading to a stack-based buffer overflow.
Risk Assessment
The organization may be exposed to remote attacks that could lead to system crashes and allow attackers to execute malicious code.
Recommendation
It is recommended to update to the latest version of DirectFB to mitigate these vulnerabilities and implement additional security measures such as monitoring network traffic.
Other vulnerabilities in DirectFB 1.4.13
Original NVD description (English source)
Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers a stack-based buffer overflow.