Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2010-2808

Опубликовано: 05 авг. 2010
Источник: redhat
CVSS2: 6.8
EPSS Низкий

Описание

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 3freetypeNot affected
Red Hat Enterprise Linux 4freetypeFixedRHSA-2010:073704.10.2010
Red Hat Enterprise Linux 5freetypeFixedRHSA-2010:073704.10.2010
Red Hat Enterprise Linux 6freetypeFixedRHSA-2010:086410.11.2010

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-121
https://bugzilla.redhat.com/show_bug.cgi?id=621907FreeType: Stack-based buffer overflow by processing certain LWFN fonts

EPSS

Процентиль: 92%
0.07802
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
почти 15 лет назад

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font.

nvd
почти 15 лет назад

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font.

debian
почти 15 лет назад

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs. ...

github
около 3 лет назад

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font.

oracle-oval
больше 14 лет назад

ELSA-2010-0737: freetype security update (IMPORTANT)

EPSS

Процентиль: 92%
0.07802
Низкий

6.8 Medium

CVSS2