PT-2010-1110 · Freetype+2 · Freetype+2

Jagger + 1 · Published 2010-07-30 · Updated 2023-02-13 · CVE-2010-2500

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.4.0 FreeType versions prior to 2.4.8

Description The issue is related to an integer overflow in the gray render span function in smooth/ftgrays.c, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted font file. Multiple vulnerabilities in the freetype package may lead to violations of confidentiality, integrity, and availability of protected information, and exploitation can be done remotely.

Recommendations For versions prior to 2.4.0, update to version 2.4.0 or later to resolve the issue. For versions prior to 2.4.8, update to version 2.4.8 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted font files until a patch is available.

Fix

DoS

Buffer Overflow

Integer Overflow

Weakness Enumeration

CWE-119

CWE-190

Related Identifiers

BDU:2015-09431

CVE-2010-2500

DSA-2070-1

RHSA-2010:0577

RHSA-2010:0578

RHSA-2010_0578

Affected Products

Freetype

Red Hat

Suse

References · 32

• http://debian.org/security/2010/dsa-2070 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:137 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0577.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=613167 · Patch
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2500 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09431 · Security Note
• http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=6305b869d86ff415a33576df6d43729673c66eee · Patch
• http://ubuntu.com/usn/USN-963-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0578.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2500 · Security Note
• https://osv.dev/vulnerability/CVE-2010-2500 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-2500 · Vendor Advisory
• http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html · Note
• https://t.me/cvenotify/8956 · Telegram Post