PT-2010-1118 · Freetype+1 · Freetype+1

Publicado 2010-08-19 · Atualizado 2024-06-15 · CVE-2010-3053

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.4.2 FreeType versions prior to 2.4.8

Description The issue allows remote attackers to cause problems with the application, potentially leading to a denial of service, by using a specially crafted BDF font file. This is related to an attempted modification of a value in a static string. Multiple vulnerabilities in the FreeType package can lead to issues with confidentiality, integrity, and availability of protected information, and these can be exploited remotely.

Recommendations For versions prior to 2.4.2, update to version 2.4.2 or later. For versions prior to 2.4.8, update to version 2.4.8 or later.

Correção

DoS

Buffer Overflow

RCE

Enumeração de Fraquezas

CWE-119

CWE-20

Identificadores relacionados

BDU:2015-09431

CVE-2010-3053

DSA-2105-1

OPENSUSE-SU-2024:10172-1

OPENSUSE-SU-2024:10438-1

Produtos afetados

Freetype

Suse

Referências · 75

• https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019 · Nota
• https://suse.com/security/cve/CVE-2014-9670 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3053 · Nota de Segurança
• https://suse.com/security/cve/CVE-2012-1133 · Nota
• https://suse.com/security/cve/CVE-2014-9668 · Nota
• https://suse.com/security/cve/CVE-2014-9658 · Nota
• https://suse.com/security/cve/CVE-2012-1135 · Nota
• https://suse.com/security/cve/CVE-2014-9663 · Nota
• https://suse.com/security/cve/CVE-2011-3439 · Nota
• https://suse.com/security/cve/CVE-2012-1138 · Nota
• http://support.apple.com/kb/HT4435 · Nota
• https://suse.com/security/cve/CVE-2012-1140 · Nota
• https://suse.com/security/cve/CVE-2014-2240 · Nota
• http://vupen.com/english/advisories/2010/3045 · Nota
• http://support.apple.com/kb/HT4456 · Nota