CVE-2010-2808

MEDIO 6.8CVE-2010-2808 · Published 19/08/2010 · updated 16/06/2026

En resumen

CVE-2010-2808 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a freetype (freetype).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.5%, mayor que el 91.5% de las vulnerabilidades.
Solución: actualizar a 2.4.2 o posterior.

Package	Affected versions	Patched versions
freetype freetype	`< 2.4.2`	`2.4.2`

Description

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font.

References

freetype.sourceforge.net/index2.html · Release Notes
git.savannah.gnu.org/cgit/freetype/freetype2.git/commit · Patch
lists.apple.com/archives/security-announce/2010//Nov/msg00000.html · Mailing List
lists.apple.com/archives/security-announce/2010//Nov/msg00003.html · Mailing List
marc.info · Mailing List
marc.info · Mailing List
secunia.com/advisories/40816 · Third Party Advisory
secunia.com/advisories/40982 · Third Party Advisory
secunia.com/advisories/42314 · Third Party Advisory
secunia.com/advisories/42317 · Third Party Advisory
sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view · Product
support.apple.com/kb/HT4435 · Broken Link
support.apple.com/kb/HT4456 · Third Party Advisory
support.apple.com/kb/HT4457 · Third Party Advisory
redhat.com/support/errata/RHSA-2010-0864.html · Third Party Advisory
securityfocus.com/bid/42285 · Third Party Advisory
ubuntu.com/usn/USN-972-1 · Third Party Advisory
vupen.com/english/advisories/2010/2018 · Third Party Advisory
vupen.com/english/advisories/2010/2106 · Third Party Advisory
vupen.com/english/advisories/2010/3045 · Third Party Advisory
vupen.com/english/advisories/2010/3046 · Third Party Advisory
bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019 · Issue Tracking
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
rhn.redhat.com/errata/RHSA-2010-0737.html · Broken Link
savannah.nongnu.org/bugs · Issue Tracking

Más vulnerabilidades de freetype

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free