PT-2010-1114 · Freetype+2 · Freetype+2

Josh Bressers

+1

·

Publicado

2010-07-30

·

Atualizado

2021-04-06

·

CVE-2010-2541

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.4.2 FreeType versions prior to 2.4.8
Description The issue is related to a buffer overflow in the ftmulti demo program, which can be triggered by a crafted font file. This can cause a denial of service, resulting in an application crash, or potentially allow the execution of arbitrary code. Additionally, there are multiple vulnerabilities in the FreeType package that can lead to breaches of confidentiality, integrity, and availability of protected information, and these can be exploited remotely.
Recommendations For versions prior to 2.4.2, update to version 2.4.2 or later. For versions prior to 2.4.8, update to version 2.4.8 or later.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-120

Identificadores relacionados

BDU:2015-09431
CVE-2010-2541
DSA-2105-1
RHSA-2010:0577
RHSA-2010:0578
RHSA-2010_0578

Produtos afetados

Freetype
Red Hat
Suse