Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2010-3311HistoryJan 07, 2011 - 11:00 p.m.
CVE-2010-3311
2011-01-0723:00:00
Debian Security Bug Tracker
security-tracker.debian.org
8
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.057 Low
EPSS
Percentile
93.2%
Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an “input stream position error” issue, a different vulnerability than CVE-2010-1797.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | freetype | < 2.4.0-1 | freetype_2.4.0-1_all.deb |
| Debian | 11 | all | freetype | < 2.4.0-1 | freetype_2.4.0-1_all.deb |
| Debian | 10 | all | freetype | < 2.4.0-1 | freetype_2.4.0-1_all.deb |
| Debian | 999 | all | freetype | < 2.4.0-1 | freetype_2.4.0-1_all.deb |
| Debian | 13 | all | freetype | < 2.4.0-1 | freetype_2.4.0-1_all.deb |
Related
prion
prion
Integer overflow
2011-01-07 23:00:00
Stack overflow
2010-08-16 18:39:00
Design/Logic Flaw
2010-08-05 18:17:00
nessus
nessus
Mandriva Linux Security Advisory : freetype2 (MDVSA-2010:201)
2010-10-14 00:00:00
Fedora 14 : freetype-2.4.2-3.fc14 (2010-15878)
2010-10-14 00:00:00
Debian DSA-2116-1 : freetype - integer overflow
2010-10-06 00:00:00
cve
cve
ubuntucve
ubuntucve
CVE-2010-3311
2010-09-28 00:00:00
CVE-2010-1797
2010-08-12 00:00:00
openvas
openvas
Mandriva Update for freetype2 MDVSA-2010:201 (freetype2)
2010-10-19 00:00:00
Mandriva Update for freetype2 MDVSA-2010:201 (freetype2)
2010-10-19 00:00:00
Fedora Update for freetype FEDORA-2010-15878
2010-12-02 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: freetype-2.4.2-3.fc14
2010-10-13 12:47:51
[SECURITY] Fedora 13 Update: freetype-2.3.11-6.fc13
2010-10-19 07:23:19
[SECURITY] Fedora 12 Update: freetype-2.3.11-6.fc12
2010-11-01 20:53:44
debian
debian
[SECURITY] [DSA-2116-1] New freetype packages integer overflow
2010-10-04 21:03:33
[SECURITY] [DSA-2116-1] New freetype packages integer overflow
2010-10-04 21:03:33
[SECURITY] [DSA-2105-1] New freetype packages fix several vulnerabilities
2010-09-07 20:39:32
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:48:58
Arbitrary Code Execution
2020-04-10 00:47:01
securityvulns
securityvulns
[SECURITY] [DSA-2116-1] New freetype packages integer overflow
2010-10-06 00:00:00
[CORE-2010-0825] Apple OS X ATSServer CFF CharStrings INDEX Sign Mismatch
2010-11-10 00:00:00
[USN-972-1] FreeType vulnerabilities
2010-08-19 00:00:00
exploitpack
exploitpack
Foxit Reader 4.0 - .pdf Multiple Stack Based Buffer Overflow Jailbreak
2010-08-24 00:00:00
seebug
seebug
Foxit Reader <= 4.0 pdf Jailbreak Exploit
2010-08-25 00:00:00
Foxit Reader <= 4.0 pdf Jailbreak Exploit
2014-07-01 00:00:00
packetstorm
packetstorm
Foxit Reader 4.0 PDF Jailbreak
2010-08-26 00:00:00
cert
cert
FreeType 2 CFF font stack corruption vulnerability
2010-08-05 00:00:00
centos
centos
freetype security update
2010-08-06 11:36:59
freetype security update
2010-10-05 15:49:55
freetype security update
2010-10-04 20:11:54
redhat
redhat
(RHSA-2010:0607) Important: freetype security update
2010-08-05 00:00:00
(RHSA-2010:0736) Important: freetype security update
2010-10-04 00:00:00
(RHSA-2010:0737) Important: freetype security update
2010-10-04 00:00:00
oraclelinux
oraclelinux
freetype security update
2010-08-05 00:00:00
freetype security update
2010-10-04 00:00:00
freetype security update
2010-10-04 00:00:00
debiancve
debiancve
CVE-2010-1797
2010-08-16 18:39:00
exploitdb
exploitdb
threatpost
threatpost
Apple Zaps JailbreakMe Bugs in Record Time
2010-08-11 19:43:56
ubuntu
ubuntu
FreeType vulnerabilities
2010-11-04 00:00:00
FreeType vulnerabilities
2010-08-17 00:00:00
osv
osv
freetype - several vulnerabilities
2010-09-07 00:00:00
gentoo
gentoo
FreeType: Multiple vulnerabilities
2012-01-23 00:00:00
suse
suse
Security update for freetype2 (important)
2012-04-23 18:08:18
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.057 Low
EPSS
Percentile
93.2%
Related for DEBIANCVE:CVE-2010-3311