PT-2010-1113 · Freetype+2 · Freetype+2

Robert Swiecki · Publicado 2010-07-30 · Atualizado 2021-04-06 · CVE-2010-2527

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.4.0 FreeType versions prior to 2.4.8

Description The issue concerns multiple buffer overflows in demo programs within FreeType, potentially allowing remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted font file. Exploitation of the vulnerabilities may lead to breaches in confidentiality, integrity, and availability of protected information, and can be carried out remotely.

Recommendations For FreeType versions prior to 2.4.0, update to version 2.4.0 or later. For FreeType versions prior to 2.4.8, update to version 2.4.8 or later.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

CWE-120

Identificadores relacionados

BDU:2015-09431

CVE-2010-2527

DSA-2070-1

RHSA-2010:0577

RHSA-2010:0578

RHSA-2010_0578

Produtos afetados

Freetype

Red Hat

Suse

Referências · 27

• http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html · Nota
• https://savannah.nongnu.org/bugs/?30248 · Nota
• https://security-tracker.debian.org/tracker/CVE-2010-2527 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2010-2527 · Nota
• http://secunia.com/advisories/48951 · Nota
• http://debian.org/security/2010/dsa-2070 · Aviso do Fabricante
• https://savannah.nongnu.org/bugs/?30306 · Nota
• http://securitytracker.com/id?1024266 · Nota
• https://osv.dev/vulnerability/CVE-2010-2527 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2010-0577.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2010-2499 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2527 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-201201-09.xml · Nota
• https://access.redhat.com/security/cve/CVE-2010-2500 · Nota
• http://marc.info/?l=oss-security&m=127912955808467&w=2 · Nota