CVE-2014-2978

High

Published: 11/06/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The Dispatch_Write function in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, leading to an out-of-bounds write.

Risk Assessment

Attackers may exploit this vulnerability to remotely crash the system or execute malicious code, posing a significant security threat to the organization.

Recommendation

It is recommended to update to the latest version of DirectFB to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in DirectFB 1.4.4

CVE-2014-2977High
Multiple integer signedness errors in the Dispatch_Write function in DirectFB 1.4.13 may allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, leading to a stack-based buffer overflow.

Original NVD description (English source)

The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, which triggers an out-of-bounds write.