CVE-2011-3439

Опубликовано: 11 нояб. 2011

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.

Ссылки

http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00008.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00003.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00012.html
Broken Link
http://secunia.com/advisories/46921
Third Party Advisory
http://secunia.com/advisories/48951
Third Party Advisory
http://support.apple.com/kb/HT5052
Vendor Advisory
http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00008.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00003.html
Broken Link
http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00012.html
Broken Link
http://secunia.com/advisories/46921
Third Party Advisory
http://secunia.com/advisories/48951
Third Party Advisory
http://support.apple.com/kb/HT5052
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 5.0.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:-:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:vmware:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp1:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06537

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2011-3439

ubuntu

почти 14 лет назад

FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.

CVE-2011-3439

redhat

почти 14 лет назад

FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.

CVE-2011-3439

debian

почти 14 лет назад

FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attac ...

GHSA-g6wc-2mxr-5w42

github

больше 3 лет назад

FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.

ELSA-2011-1455

oracle-oval

почти 14 лет назад

ELSA-2011-1455: freetype security update (IMPORTANT)

EPSS

Процентиль: 91%

0.06537

Низкий

9.3 Critical

CVSS2

Дефекты

CWE-787