CVE-2010-2499

Buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment...

CVE-2010-2541

Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

PT-2010-1050 · Freetype +1 · Freetype +1

Name of the Vulnerable Software and Affected Versions: freetype versions prior to 2.4.8 freetype version 2.1.4 Description: The issue concerns multiple vulnerabilities in the freetype package, which can lead to a violation of confidentiality, integrity, and availability of protected information...

[USN-972-1] FreeType vulnerabilities

=========================================================== Ubuntu Security Notice USN-972-1 August 17, 2010 freetype vulnerabilities CVE-2010-1797, CVE-2010-2541, CVE-2010-2805, CVE-2010-2806, CVE-2010-2807, CVE-2010-2808 =========================================================== A security iss...

PT-2010-1117 · Freetype +1 · Freetype +1

Name of the Vulnerable Software and Affected Versions: freetype versions prior to 2.4.8 freetype versions prior to 2.4.2 Description: The issue affects the freetype package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information...

USN-972-1: FreeType vulnerabilities

It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges...

freetype security update

CentOS Errata and Security Advisory CESA-2010:0577 Updated freetype packages that fix various security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS ba...

DEBIAN-CVE-2010-1797

Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...

Acrobat Acrobat - Font Parsing Integer Overflow

Acrobat Acrobat - Font Parsing Integer Overflow From the authors site: In this article, I'm going to share with you my observations and analysis on recent Adobe Acrobat Font Parsing vulnerability. Source document exists here: http://securityevaluators.com/files/papers/CrashAnalysis.pdf page 51-58...

Acrobat Acrobat - Font Parsing Integer Overflow

From the authors site: In this article, I'm going to share with you my observations and analysis on recent Adobe Acrobat Font Parsing vulnerability. Source document exists here: http://securityevaluators.com/files/papers/CrashAnalysis.pdf page 51-58 After reading the paper, I started studying the...

Mandriva Update for freetype2 MDVSA-2010:149 (freetype2)

Check for the Version of freetype2 OpenVAS Vulnerability Test Mandriva Update for freetype2 MDVSA-2010:149 freetype2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Linux Security Advisory : freetype2 (MDVSA-2010:149)

A vulnerability has been discovered and corrected in freetype2 : Multiple stack overflow flaws have been reported in the way FreeType font rendering engine processed certain CFF opcodes. An attacker could use these flaws to create a specially crafted font file that, when opened, would cause an...

CVE-2010-2541

Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2806

Array index error in the t42parsesfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based...

CVE-2010-2807

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2805

The FTStreamEnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font file...

CVE-2010-2808

Buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File aka LWFN font...

CentOS 3 / 4 / 5 : freetype (CESA-2010:0607)

Updated freetype packages that fix two security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

freetype security update

CentOS Errata and Security Advisory CESA-2010:0607 Updated freetype packages that fix two security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System...

Adobe Reader/Acrobat Font Parsing Integer Overflow Vulnerability (Windows)

This host is installed with Adobe products and are prone to font parsing integer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbadobeprdtsintoverflowvulnwin.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Reader/Acrobat Font Parsing Integer Overflow Vulnerability Windows Authors: Madhu...