7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.021 Low
EPSS
Percentile
87.8%
FreeType is a free, high-quality, portable font engine that can open and
manage font files, as well as efficiently load, hint and render individual
glyphs.
Multiple flaws were discovered in FreeTypeβs Printer Font Binary (PFB)
font-file format parser. If a user loaded a carefully crafted font-file
with a program linked against FreeType, it could cause the application to
crash, or possibly execute arbitrary code. (CVE-2008-1806, CVE-2008-1807,
CVE-2008-1808)
Note: the flaw in FreeTypeβs TrueType Font (TTF) font-file format parser,
covered by CVE-2008-1808, did not affect the freetype packages as shipped
in Red Hat Enterprise Linux 3, 4, and 5, as they are not compiled with TTF
Byte Code Interpreter (BCI) support.
Users of freetype should upgrade to these updated packages, which contain
backported patches to resolve these issues.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 4 | s390 | freetype-utils | <Β 2.1.9-8.el4.6 | freetype-utils-2.1.9-8.el4.6.s390.rpm |
RedHat | 5 | ppc | freetype-devel | <Β 2.2.1-20.el5_2 | freetype-devel-2.2.1-20.el5_2.ppc.rpm |
RedHat | 3 | ia64 | freetype-devel | <Β 2.1.4-8.el3 | freetype-devel-2.1.4-8.el3.ia64.rpm |
RedHat | 4 | s390x | freetype-devel | <Β 2.1.9-7.el4.6 | freetype-devel-2.1.9-7.el4.6.s390x.rpm |
RedHat | 4 | x86_64 | freetype-utils | <Β 2.1.9-8.el4.6 | freetype-utils-2.1.9-8.el4.6.x86_64.rpm |
RedHat | 4 | i386 | freetype-devel | <Β 2.1.9-8.el4.6 | freetype-devel-2.1.9-8.el4.6.i386.rpm |
RedHat | 4 | x86_64 | freetype | <Β 2.1.9-7.el4.6 | freetype-2.1.9-7.el4.6.x86_64.rpm |
RedHat | 4 | ppc | freetype-demos | <Β 2.1.9-8.el4.6 | freetype-demos-2.1.9-8.el4.6.ppc.rpm |
RedHat | 4 | i386 | freetype-devel | <Β 2.1.9-7.el4.6 | freetype-devel-2.1.9-7.el4.6.i386.rpm |
RedHat | 5 | ia64 | freetype-devel | <Β 2.2.1-20.el5_2 | freetype-devel-2.2.1-20.el5_2.ia64.rpm |