CVE-2010-2806

CVE-2010-2806 affects FreeType before 2.4.2 due to an array index error in t42_parse_sfnts (type42/t42parse.c). Exploitation could crash the application or possibly enable arbitrary code execution via negative size values in FontType42 font files, resulting in a heap-based buffer overflow. The Co...