Описание
Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | released | 2.1.10-1ubuntu2.5 |
| devel | not-affected | 2.3.6-1ubuntu1 |
| feisty | released | 2.2.1-5ubuntu1.2 |
| gutsy | released | 2.3.5-1ubuntu4.7.10.1 |
| hardy | released | 2.3.5-1ubuntu4.8.04.1 |
| upstream | released | 2.3.6-1 |
Показывать по
EPSS
7.5 High
CVSS2
Связанные уязвимости
Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.
Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.
Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dep ...
Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.
EPSS
7.5 High
CVSS2