CVE-2010-2806

CVE-2010-2806 affects FreeType before 2.4.2 due to an array index error in t42_parse_sfnts (type42/t42parse.c). Exploitation could crash the application or possibly enable arbitrary code execution via negative size values in FontType42 font files, resulting in a heap-based buffer overflow. The Co...

CVE-2010-2806: Improper Validation of Array Index

Array index error in the t42parsesfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based...