PT-2010-1052 · Freetype+2 · Freetype+2

Jan Lieskovsky + 1 · Published 2010-10-04 · Updated 2024-06-15 · CVE-2010-3311

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.4

Description The issue is related to an integer overflow in the base/ftstream.c file of the libXft library in FreeType, which can be triggered by a crafted Compact Font Format (CFF) font file. This can cause a denial of service (application crash) or possibly allow the execution of arbitrary code due to a heap-based buffer overflow. The vulnerability can be exploited remotely.

Recommendations For FreeType versions prior to 2.4, update to version 2.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted CFF font files to minimize the risk of exploitation.

Fix

DoS

Buffer Overflow

Improper Validation of Array Index

Weakness Enumeration

CWE-119

CWE-189

CWE-129

Related Identifiers

BDU:2015-06176

BDU:2015-06178

BDU:2015-08623

BDU:2015-08624

BDU:2015-09431

CVE-2010-3311

DSA-2116-1

OPENSUSE-SU-2024:10172-1

OPENSUSE-SU-2024:10438-1

RHSA-2010:0736

RHSA-2010:0737

RHSA-2010:0864

RHSA-2010_0737

RHSA-2010_0864

Affected Products

Freetype

Red Hat

Suse

References · 88

• https://linux.oracle.com/errata/ELSA-2010-0889.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2010-0736.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08623 · Security Note
• https://osv.dev/vulnerability/CVE-2010-3311 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-08624 · Security Note
• https://bdu.fstec.ru/vul/2015-09431 · Security Note
• http://debian.org/security/2010/dsa-2116 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06176 · Security Note
• http://ubuntu.com/usn/USN-1013-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-3311 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:201 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0864.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10172-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-3311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3311 · Security Note