SUSE CVE-2010-2519

Heap-based buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file...

SUSE CVE-2014-9673

Integer signedness error in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted Mac font...

Heap-buffer-overflow in Mac_Read_sfnt_Resource

Project: https://github.com/freetype/freetype2-testing.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4605905983242240 Fuzzer: libFuzzerfreetype2fuzzer Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

FreeType 'Mac_Read_POST_Resource' Function Denial of Service Vulnerability

FreeType is a library of popular font functions. A security vulnerability exists in the 'MacReadPOSTResource' function in the FreeType 'base/ftobjs.c' file. Due to the program failing to validate the source value when increasing the length value. A remote attacker could cause a denial of service...

FreeType 'Mac_Read_POST_Resource' Function Integer Sign Error Vulnerability

FreeType is a library of popular font functions. An integer sign error vulnerability exists in the 'MacReadPOSTResource' function in the FreeType 'base/ftobjs.c' file. A remote attacker could exploit this vulnerability to cause a denial of service heap buffer overflow via a specially crafted Mac...

UBUNTU-CVE-2014-9674

The MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service integer overflow and heap-based buffer overflow or possibly have unspecified other...

UBUNTU-CVE-2014-9673

Integer signedness error in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via a crafted Mac font...

PT-2015-4346

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to an integer signedness error in the Mac Read POST Resource function in base/ftobjs.c. This error can be exploited by remote attackers using a crafted Mac font, potentially...

FreeType: Stack-based buffer overflow by processing certain LWFN fonts

Buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File aka LWFN font...

DEBIAN-CVE-2010-2499

Buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment...

CVE-2010-2519

Heap-based buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file...

PT-2010-1117 · Freetype +1 · Freetype +1

Name of the Vulnerable Software and Affected Versions: freetype versions prior to 2.4.8 freetype versions prior to 2.4.2 Description: The issue affects the freetype package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information...

freetype: heap buffer overflow vulnerability when processing certain font files

Heap-based buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file...

freetype: buffer overflow vulnerability

Buffer overflow in the MacReadPOSTResource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment...

PT-2010-1111 · Freetype +2 · Freetype +2

Name of the Vulnerable Software and Affected Versions: FreeType versions prior to 2.4.0 FreeType versions prior to 2.4.8 Description: The issue is related to a heap-based buffer overflow in the Mac Read POST Resource function in base/ftobjs.c, which can be triggered by a crafted length value in a...