Lucene search

K
freebsdFreeBSD5D374B01-C3EE-11E0-8AA5-485D60CB5385
HistoryJul 19, 2011 - 12:00 a.m.

freetype2 -- execute arbitrary code or cause denial of service

2011-07-1900:00:00
vuxml.freebsd.org
10

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.058 Low

EPSS

Percentile

93.3%

Vincent Danen reports:

Due to an error within the t1_decoder_parse_charstrings()
function (src/psaux/t1decode.c) and can be exploited to corrupt
memory by tricking a user into processing a specially-crafted
postscript Type1 font in an application that uses the freetype
library.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreetype2< 2.4.6UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.058 Low

EPSS

Percentile

93.3%