Published: 19/08/2010 Updated: 13/02/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType prior to 2.4.2 allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freetype freetype
canonical ubuntu linux 9.04
canonical ubuntu linux 9.10
canonical ubuntu linux 8.04
canonical ubuntu linux 10.04
canonical ubuntu linux 6.06
apple mac os x
apple iphone os
apple tvos

It was discovered that FreeType did not correctly handle certain malformed font files If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges ...

Synopsis Important: freetype security update Type/Severity Security Advisory: Important Topic Updated freetype packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 4 and 5The Red Hat Security Response Team has rated this update as havingimportant security impact Common ...

Synopsis Important: freetype security update Type/Severity Security Advisory: Important Topic Updated freetype packages that fix three security issues are now availablefor Red Hat Enterprise Linux 3The Red Hat Security Response Team has rated this update as havingimportant security impact Common Vulnerabi ...

Several vulnerabilities have been discovered in the FreeType font library The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-1797 Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgloadc in FreeType allow remote at ...

CWE-129 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=c06da1ad34663da7b6fc39b030dc3ae185b96557 https://bugzilla.redhat.com/show_bug.cgi?id=621980 https://savannah.nongnu.org/bugs/?30656 http://marc.info/?l=oss-security&m=128111955616772&w=2 https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019 http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view http://secunia.com/advisories/40982 http://www.vupen.com/english/advisories/2010/2018 http://www.vupen.com/english/advisories/2010/2106 http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2 http://www.securityfocus.com/bid/42285 http://secunia.com/advisories/40816 http://www.ubuntu.com/usn/USN-972-1 http://support.apple.com/kb/HT4435 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html http://support.apple.com/kb/HT4456 http://www.vupen.com/english/advisories/2010/3045 http://support.apple.com/kb/HT4457 http://www.vupen.com/english/advisories/2010/3046 http://secunia.com/advisories/42314 http://secunia.com/advisories/42317 https://rhn.redhat.com/errata/RHSA-2010-0736.html https://rhn.redhat.com/errata/RHSA-2010-0737.html http://www.redhat.com/support/errata/RHSA-2010-0864.html https://usn.ubuntu.com/972-1/https://nvd.nist.gov

CVE-2010-2806

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect