PT-2010-1111 · Freetype+2 · Freetype+2

Jagger + 1 · Published 2010-07-30 · Updated 2023-02-13 · CVE-2010-2519

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.4.0 FreeType versions prior to 2.4.8

Description The issue is related to a heap-based buffer overflow in the Mac Read POST Resource function in base/ftobjs.c, which can be triggered by a crafted length value in a POST fragment header in a font file. This can cause a denial of service, such as an application crash, or possibly allow the execution of arbitrary code. The vulnerability can be exploited remotely.

Recommendations For versions prior to 2.4.0, update to version 2.4.0 or later. For versions prior to 2.4.8, update to version 2.4.8 or later. As a temporary workaround, consider restricting access to font files or disabling the Mac Read POST Resource function until a patch is available.

Exploit

Fix

DoS

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-787

Related Identifiers

BDU:2015-09431

CVE-2010-2519

DSA-2070-1

RHSA-2010:0578

RHSA-2010_0578

Affected Products

Freetype

Red Hat

Suse

References · 31

• 🔥 https://savannah.nongnu.org/bugs/?30306 · Exploit
• http://debian.org/security/2010/dsa-2070 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:137 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-2519 · Vendor Advisory
• http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=5ef20c8c1d4de12a84b50ba497c2a358c90ec44b · Patch
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=613194 · Patch
• http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b2ea64bcc6c385a8e8318f9c759450a07df58b6d · Patch
• https://bdu.fstec.ru/vul/2015-09431 · Security Note
• http://ubuntu.com/usn/USN-963-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-2519 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0578.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-2519 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2519 · Security Note
• http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html · Note