[Forgot Password]
Login  Register Subscribe

23631

 
 

126998

 
 

102010

 
 

909

 
 

80911

 
 

121

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2010-2808Date: (C)2010-08-19   (M)2018-02-19


Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font.

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score  : CVSS Score  : 6.8
Exploit Score: Exploit Score: 8.6
Impact Score : Impact Score : 6.4
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: Access Vector: NETWORK
Attack Complexity: Access Complexity: MEDIUM
Privileges Required: Authentication: NONE
User Interaction: Confidentiality: PARTIAL
Scope: Integrity: PARTIAL
Confidentiality: Availability: PARTIAL
Integrity:  
Availability:  
  





Reference:
SECUNIA-40816
SECUNIA-40982
BID-42285
SECUNIA-42314
SECUNIA-42317
ADV-2010-2018
ADV-2010-2106
ADV-2010-3045
ADV-2010-3046
APPLE-SA-2010-11-10-1
APPLE-SA-2010-11-22-1
RHSA-2010:0737
RHSA-2010:0864
USN-972-1
http://marc.info/?l=oss-security&m=128110167119337&w=2
http://marc.info/?l=oss-security&m=128111955616772&w=2
http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=81f3472c0ba7b8f6466e2e214fa8c1c17fade975
http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view
http://support.apple.com/kb/HT4435
http://support.apple.com/kb/HT4456
http://support.apple.com/kb/HT4457
https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019
https://bugzilla.redhat.com/show_bug.cgi?id=621907
https://savannah.nongnu.org/bugs/?30658

CPE    30
cpe:/a:freetype:freetype:2.2
cpe:/a:freetype:freetype:2.3.9
cpe:/a:freetype:freetype:2.1
cpe:/a:freetype:freetype:2.1.7
...
CWE    1
CWE-119
OVAL    14
oval:org.secpod.oval:def:201862
oval:org.secpod.oval:def:201844
oval:org.secpod.oval:def:500289
oval:org.secpod.oval:def:500347
...

© 2013 SecPod Technologies