[SECURITY] [DSA 1302-1] New freetype packages fix integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-1302-1 [email protected] http://www.debian.org/security/ Steve Kemp June 10, 2007 - ------------------------------------------------------------------------ Package : freetype 2.2.1-5+etch1...

DSA-1302-1 freetype - integer overflow

Bulletin has no description...

GLSA-200705-22 : FreeType: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200705-22 FreeType: Buffer overflow Victor Stinner discovered a heap-based buffer overflow in the function GetVMetrics in src/truetype/ttgload.c when processing TTF files with a negative npoints attribute. Impact : A remote attack...

FreeType: Buffer overflow

Background FreeType is a True Type Font rendering library. Description Victor Stinner discovered a heap-based buffer overflow in the function GetVMetrics in src/truetype/ttgload.c when processing TTF files with a negative npoints attribute. Impact A remote attacker could entice a user to open a...

rPSA-2007-0108-1 freetype

rPath Security Advisory: 2007-0108-1 Published: 2007-05-23 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Indirect User Deterministic Unauthorized Access Updated Versions: freetype=/conary.rpath.com@rpl:devel//1/2.1.10-5.2-1 References: https://vulners.com/cve/CVE-2007-2754...

freetype integer overflow

Integer overflow on TTF fonts parsing leads to heap bufffer overflow...

Freetype TT_Load_Simple_Glyph() TTF文件处理整数溢出漏洞

FreeType是一个流行的字体函数库。 Freetype的truetype/ttgload.c文件中TTLoadSimpleGlyph函数处理畸形TTF图形时存在有符/无符转换错误，如果用户受骗打开了设置有负数npoints值的畸形TTF图形的话，就可能触发整数溢出和堆溢出，导致执行任意指令。 FreeType FreeType = 2.3.4 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2007-2754

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

CVE-2007-2754

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

CVE-2007-2754

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

CVE-2007-2754

CVE-2007-2754 affects FreeType up to 2.3.4 and earlier, where a signedness error in truetype/ttgload.c can trigger a heap-based buffer overflow via a crafted TTF image with a negative n_points, enabling remote code execution per the description. Connected patches exist (e.g., Solaris X11 6.6.2 pa...

CVE-2007-2754

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

CVE-2007-2754: Undefined Security Weakness

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

FreeType 2 -- Heap overflow vulnerability

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

ABC-View Manager 1.42 - .psp Local Buffer Overflow

ABC-View Manager 1.42 - .psp Local Buffer Overflow / ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is vulnerable to an unspecified buffer overflow when processing a crafted .TTF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun...

FreeType - .TTF File Remote Denial of Service

FreeType - .TTF File Remote Denial of Service source: https://www.securityfocus.com/bid/18329/info FreeType is prone to a denial-of-service vulnerability. This issue is due to a flaw in the library that causes a NULL-pointer dereference. This issue allows remote attackers to crash applications th...

FreeType - .TTF File Remote Buffer Overflow

FreeType - .TTF File Remote Buffer Overflow source: https://www.securityfocus.com/bid/18326/info FreeType is prone to a buffer-overflow vulnerability. This issue is due to an integer-underflow that results in a buffer being overrun with attacker-supplied data. This issue allows remote attackers t...

FreeType - '.TTF' File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/18326/info FreeType is prone to a buffer-overflow vulnerability. This issue is due to an integer-underflow that results in a buffer being overrun with attacker-supplied data. This issue allows remote attackers to execute arbitrary machine code in the...