CVE-2010-2808

CVE-2010-2808 : A buffer overflow in FreeType’s Mac_Read_POST_Resource (base/ftobjs.c) on vulnerable builds prior to 2.4.2 allows remote attackers to crash the application due to memory corruption and may permit arbitrary code execution via a crafted Adobe Type 1 Mac Font File (LWFN). Impact is a...

CVE-2010-2807

CVE-2010-2807 affects FreeType up to version 2.4.2, where improper integer bounds checking in the font processing code can lead to a crash or potentially arbitrary code execution via a crafted font file. Connected advisories reference the 2.4.2 release as the fix. Remediation: upgrade to FreeType...

CVE-2010-2527

CVE-2010-2527 affects the FreeType 2 font engine (before 2.4.0). The issue is buffer overflows in the FreeType demo programs, which could cause an application crash or potentially allow arbitrary code execution via a crafted font file. Public references in connected documents confirm multiple adv...

CVE-2010-2500

Integer overflow in the grayrenderspan function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2805

The FTStreamEnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2808

Buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File aka LWFN font...

CVE-2010-2527

Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2520

Heap-based buffer overflow in the InsIUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2497

FreeType vulnerability CVE-2010-2497 arises from an integer underflow in glyph handling in versions before 2.4.0, enabling remote crash or possibly arbitrary code execution via crafted fonts. Multiple advisories ( Gentoo GLSA, openSUSE, Nessus plugins, OSV) list CVE-2010-2497 among a set of FreeT...

CVE-2010-2520

Heap-based buffer overflow in the InsIUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2541

Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2500

Integer overflow in the grayrenderspan function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2807

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2499

CVE-2010-2499 is a FreeType buffer overflow in the PS/PFB handling path (Mac_Read_POST_Resource in base/ftobjs.c) that can cause an application crash or possibly allow remote code execution when processing a crafted LaserWriter PS font. Public advisories note multiple vendor updates fixing this i...

CVE-2010-2497

Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-3053

bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service application crash via a crafted BDF font file, related to an attempted modification of a value in a static string...

CVE-2010-2808

Buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File aka LWFN font...

CVE-2010-3053

CVE-2010-3053 affects FreeType (bdf/bdflib.c). A crafted BDF font can cause an application crash due to an error in modifying a value in a static string during BDF parsing, per the description. Root cause: insecure handling in the BDF font loader leading to a crash/DoS. Impact: denial of service ...

CVE-2010-2498

The CVE-2010-2498 entry involves FreeType (pSHinter/pshalgo.c) where the function psh_glyph_find_strong_points fails to implement hinting masks correctly. This can lead to heap memory corruption and a crash, with potential arbitrary code execution via a crafted font file that triggers an invalid ...

CVE-2010-2500

CVE-2010-2500 details (from connected documents): FreeType’s integer overflow in the gray_render_span function (ftgrays.c) before version 2.4.0 can be triggered by parsing a crafted font file, potentially crashing the application or allowing arbitrary code execution. The vulnerability is rooted i...