Lucene search

K
freebsdFreeBSDB975763F-5210-11DB-8F1A-000A48049292
HistoryJul 10, 2006 - 12:00 a.m.

freetype -- LWFN Files Buffer Overflow Vulnerability

2006-07-1000:00:00
vuxml.freebsd.org
18

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.577 Medium

EPSS

Percentile

97.7%

SecurityTracker reports:

A vulnerability was reported in FreeType. A remote user
can cause arbitrary code to be executed on the target
user’s system.
A remote user can create a specially crafted font file
that, when loaded by the target user’s system, will trigger
an integer underflow or integer overflow and crash the
application or execute arbitrary code on the target system.
Chris Evans reported these vulnerabilities.
Impact: A remote user can create a file that, when loaded
by the target user, will execute arbitrary code on the
target user’s system.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreetype2< 2.1.10_5UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.577 Medium

EPSS

Percentile

97.7%