Lucene search
K

7 matches found

Tenable Nessus
Tenable Nessus
added 2007/10/17 12:0 a.m.24 views

openSUSE 10 Security Update : freetype2 (freetype2-3744)

This update of freetype2 fixes an integer signedness bug when handling TTF images. This bug can lead to a heap overflow that can be exploited to execute arbitrary code. CVE-2007-2754 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

6.8CVSS5.9AI score0.41922EPSS
Exploits1References1
NVD
NVD
added 2007/05/17 10:30 p.m.21 views

CVE-2007-2754

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

6.8CVSS7.7AI score0.41922EPSS
Exploits1References60
UbuntuCve
UbuntuCve
added 2007/05/17 10:30 p.m.28 views

CVE-2007-2754

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

6.8CVSS6.6AI score0.41922EPSS
Exploits1References2
Cvelist
Cvelist
added 2007/05/17 10:0 p.m.22 views

CVE-2007-2754

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

7.9AI score0.41922EPSS
Exploits1References60
CVE
CVE
added 2007/05/17 10:0 p.m.130 views

CVE-2007-2754

CVE-2007-2754 affects FreeType up to 2.3.4 and earlier, where a signedness error in truetype/ttgload.c can trigger a heap-based buffer overflow via a crafted TTF image with a negative n_points, enabling remote code execution per the description. Connected patches exist (e.g., Solaris X11 6.6.2 pa...

6.8CVSS8AI score0.41922EPSS
Exploits1References60Affected Software1
Debian CVE
Debian CVE
added 2007/05/17 10:0 p.m.22 views

CVE-2007-2754

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

6.8CVSS7.7AI score0.41922EPSS
Exploits1
FreeBSD
FreeBSD
added 2007/04/27 12:0 a.m.29 views

FreeType 2 -- Heap overflow vulnerability

Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative npoints value, which leads to an integer overflow and heap-based buffer overflow...

6.8CVSS7.7AI score0.41922EPSS
Exploits1References3
Rows per page
Query Builder