PT-2011-1140 · Freetype+1 · Freetype+1
Chpwn
+4
·
Publicado
2011-07-19
·
Atualizado
2024-06-15
·
CVE-2011-0226
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
freetype versions 2.3.11 through 2.4.7
freetype version 2.3.11
Description
The issue is related to an integer signedness error in the
t1decode.c file of the FreeType library, which can be exploited remotely. This error allows attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crashes. The exploitation can occur via a crafted Type 1 font in a PDF document. There have been instances of this issue being exploited in the wild.Recommendations
For freetype versions 2.3.11 through 2.4.7, update to version 2.4.8 or later to resolve the issue.
For freetype version 2.3.11, update to version 2.4.8 or later to resolve the issue.
As a temporary workaround, consider restricting access to the
t1decode.c function until a patch is available.Correção
DoS
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Freetype
Red Hat