Published: 16/06/2008 Updated: 11/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Freetype

Integer overflow in FreeType2 prior to 2.3.6 allows context-dependent malicious users to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freetype freetype 2.3.4
freetype freetype 2.3.5
freetype freetype 1.3.1
freetype freetype 2.3.3

Multiple flaws were discovered in the PFB and TTF font handling code in freetype If a user were tricked into using a specially crafted font file, a remote attacker could execute arbitrary code with user privileges or cause the application linked against freetype to crash, leading to a denial of service ...

Debian Bug report logs - #485841 freetype: multiple security issues Package: freetype; Maintainer for freetype is Hugh McMaster <hughmcmaster@outlookcom>; Reported by: Thomas Bläsing <thomasbl@poolmathtu-berlinde> Date: Wed, 11 Jun 2008 20:03:03 UTC Severity: grave Tags: security Found in version 235-1 Fixed ...

Several local vulnerabilities have been discovered in freetype, a FreeType 2 font engine, which could allow the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-1806 An integer overflow allows context-dependent attackers to execute arbitrary code via a crafted set of ...

CWE-189 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=715 http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780 http://www.securityfocus.com/bid/29640 http://securitytracker.com/id?1020238 http://secunia.com/advisories/30600 http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html http://www.vmware.com/security/advisories/VMSA-2008-0014.html http://secunia.com/advisories/30740 http://www.vmware.com/support/server/doc/releasenotes_server.html http://secunia.com/advisories/30766 http://www.redhat.com/support/errata/RHSA-2008-0558.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html http://secunia.com/advisories/31712 http://secunia.com/advisories/30819 http://www.redhat.com/support/errata/RHSA-2008-0556.html http://secunia.com/advisories/31709 http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1 http://www.vmware.com/support/player2/doc/releasenotes_player2.html http://secunia.com/advisories/31711 http://secunia.com/advisories/30967 http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html http://secunia.com/advisories/31707 http://www.mandriva.com/security/advisories?name=MDVSA-2008:121 http://www.vmware.com/support/player/doc/releasenotes_player.html http://secunia.com/advisories/30821 http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html http://security.gentoo.org/glsa/glsa-200806-10.xml http://secunia.com/advisories/30721 http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html http://secunia.com/advisories/31900 http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html http://www.ubuntu.com/usn/usn-643-1 http://support.apple.com/kb/HT3129 http://secunia.com/advisories/31856 http://secunia.com/advisories/31823 http://secunia.com/advisories/31577 http://support.apple.com/kb/HT3026 https://issues.rpath.com/browse/RPL-2608 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255 http://secunia.com/advisories/31479 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://www.vupen.com/english/advisories/2008/2558 http://www.vupen.com/english/advisories/2008/2525 http://www.vupen.com/english/advisories/2008/2423 http://www.vupen.com/english/advisories/2008/2466 http://www.vupen.com/english/advisories/2008/1876/references http://www.vupen.com/english/advisories/2008/1794 http://security.gentoo.org/glsa/glsa-201209-25.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9321 http://www.securityfocus.com/archive/1/495869/100/0/threaded http://www.securityfocus.com/archive/1/495497/100/0/threaded https://usn.ubuntu.com/643-1/https://nvd.nist.gov

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook