Published: 16/06/2008 Updated: 11/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Freetype

FreeType2 prior to 2.3.6 allow context-dependent malicious users to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freetype freetype 1.3.1
freetype freetype 2.3.5
freetype freetype 2.3.3
freetype freetype 2.3.4

Debian Bug report logs - #485841 freetype: multiple security issues Package: freetype; Maintainer for freetype is Hugh McMaster <hughmcmaster@outlookcom>; Reported by: Thomas Bläsing <thomasbl@poolmathtu-berlinde> Date: Wed, 11 Jun 2008 20:03:03 UTC Severity: grave Tags: security Found in version 235-1 Fixed ...

Multiple flaws were discovered in the PFB and TTF font handling code in freetype If a user were tricked into using a specially crafted font file, a remote attacker could execute arbitrary code with user privileges or cause the application linked against freetype to crash, leading to a denial of service ...

Several local vulnerabilities have been discovered in freetype, a FreeType 2 font engine, which could allow the execution of arbitrary code The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-1806 An integer overflow allows context-dependent attackers to execute arbitrary code via a crafted set of ...

CWE-189 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=716 http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780 http://www.securityfocus.com/bid/29641 http://securitytracker.com/id?1020239 http://secunia.com/advisories/30600 http://secunia.com/advisories/30819 http://www.vmware.com/support/server/doc/releasenotes_server.html http://secunia.com/advisories/30967 https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html http://secunia.com/advisories/31712 http://security.gentoo.org/glsa/glsa-200806-10.xml http://secunia.com/advisories/30821 http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html http://secunia.com/advisories/31709 http://secunia.com/advisories/30766 https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html http://secunia.com/advisories/31711 http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm http://www.vmware.com/security/advisories/VMSA-2008-0014.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1 http://www.redhat.com/support/errata/RHSA-2008-0558.html http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html http://secunia.com/advisories/30740 http://secunia.com/advisories/30721 http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:121 http://secunia.com/advisories/31707 http://www.vmware.com/support/player2/doc/releasenotes_player2.html http://www.redhat.com/support/errata/RHSA-2008-0556.html http://www.vmware.com/support/player/doc/releasenotes_player.html http://www.ubuntu.com/usn/usn-643-1 http://secunia.com/advisories/31856 http://secunia.com/advisories/31900 http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html http://support.apple.com/kb/HT3129 http://secunia.com/advisories/31823 http://secunia.com/advisories/31577 http://support.apple.com/kb/HT3026 https://issues.rpath.com/browse/RPL-2608 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255 http://secunia.com/advisories/31479 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://www.vupen.com/english/advisories/2008/2558 http://www.vupen.com/english/advisories/2008/2525 http://www.vupen.com/english/advisories/2008/2423 http://www.vupen.com/english/advisories/2008/2466 http://www.vupen.com/english/advisories/2008/1876/references http://www.vupen.com/english/advisories/2008/1794 http://security.gentoo.org/glsa/glsa-201209-25.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9767 http://www.securityfocus.com/archive/1/495869/100/0/threaded http://www.securityfocus.com/archive/1/495497/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=485841 https://usn.ubuntu.com/643-1/https://nvd.nist.gov

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook