CVE-2010-2807

Severity

68%

Complexity

86%

Confidentiality

106%

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

CVSS 2.0 Base Score 6.8. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P).

Overview

Type

FreeType

First reported 14 years ago

2010-08-19 18:00:00

Last updated 14 years ago

2010-12-10 06:43:00

Affected Software

FreeType 1.3.1

1.3.1

FreeType 2.0.6

2.0.6

FreeType 2.0.9

2.0.9

FreeType 2.1

2.1

FreeType 2.1.3

2.1.3

FreeType 2.1.4

2.1.4

FreeType 2.1.5

2.1.5

FreeType 2.1.6

2.1.6

FreeType 2.1.7

2.1.7

FreeType 2.1.8

2.1.8

FreeType 2.1.8 rc1

2.1.8_rc1

FreeType 2.1.9

2.1.9

FreeType 2.1.10

2.1.10

FreeType 2.2

2.2

FreeType 2.2.1

2.2.1

FreeType 2.3.0

2.3.0

FreeType 2.3.1

2.3.1

FreeType 2.3.2

2.3.2

FreeType 2.3.3

2.3.3

FreeType 2.3.4

2.3.4

FreeType 2.3.5

2.3.5

FreeType 2.3.6

2.3.6

FreeType 2.3.7

2.3.7

FreeType 2.3.8

2.3.8

FreeType 2.3.9

2.3.9

FreeType 2.3.10

2.3.10

FreeType 2.3.11

2.3.11

FreeType 2.3.12

2.3.12

FreeType 2.4.0

2.4.0

References

http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2

Patch

http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=346f1867fd32dae8f56e5b482d1af98f626804ac

APPLE-SA-2010-11-10-1

APPLE-SA-2010-11-22-1

[oss-security] 20100806 Re: CVE Request -- FreeType -- Memory corruption flaw by processing certain LWFN fonts + three more

40816

Vendor Advisory

40982

Vendor Advisory

42314

42317

http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view

http://support.apple.com/kb/HT4435

http://support.apple.com/kb/HT4456

http://support.apple.com/kb/HT4457

42285

USN-972-1

ADV-2010-2018

Vendor Advisory

ADV-2010-2106

Vendor Advisory

ADV-2010-3045

ADV-2010-3046

https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019

https://savannah.nongnu.org/bugs/?30657

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.