FreeType 2 -- Multiple Vulnerabilities

Secunia reports: An integer overflow error exists in the processing of PFB font files. This can be exploited to cause a heap-based buffer overflow via a PFB file containing a specially crafted "Private" dictionary table. An error in the processing of PFB font files can be exploited to trigger the...

Debian Security Advisory DSA 1334-1 (freetype)

The remote host is missing an update to freetype announced via advisory DSA 1334-1. OpenVAS Vulnerability Test $Id: deb13341.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1334-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

openSUSE 10 Security Update : freetype2 (freetype2-3744)

This update of freetype2 fixes an integer signedness bug when handling TTF images. This bug can lead to a heap overflow that can be exploited to execute arbitrary code. CVE-2007-2754 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandrake Linux Security Advisory : tetex (MDKSA-2007:164)

Maurycy Prodeus found an integer overflow vulnerability in the way various PDF viewers processed PDF files. An attacker could create a malicious PDF file that could cause tetex to crash and possibly execute arbitrary code open a user opening the file. In addition, tetex contains an embedded copy ...

[SECURITY] [DSA 1334-1] New freetype packages fix arbitary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1334 [email protected] http://www.debian.org/security/ Steve Kemp July 18th, 2007 - ------------------------------------------------------------------------ Package : freetype Vulnerability :...

DSA-1334-1 freetype

Bulletin has no description...

Mandrake Linux Security Advisory : freetype2 (MDKSA-2007:121)

An integer overflow vulnerability was discovered in the way the FreeType font engine processed TTF files. If a user were to load a special font file with a program linked against freetype, it could cause the application to crash or possibly execute arbitrary code as the user running the program...

freetype security update

CentOS Errata and Security Advisory CESA-2007:0403-01 Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free,...

CentOS 3 / 4 : freetype (CESA-2007:0403)

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw...

RHEL 2.1 / 3 / 4 / 5 : freetype (RHSA-2007:0403)

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw...

freetype security update

CentOS Errata and Security Advisory CESA-2007:0403 Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free,...

Moderate: Red Hat Security Advisory: freetype security update

Updated freetype packages that fix a security flaw are now available for Red Hat Enterprise Linux 2.1, 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. FreeType is a free, high-quality, portable font engine. An integer overflow flaw...

Moderate: freetype security update

2.1.9-6.el4 - Add freetype-2.1.9-ttf-overflow.patch - Resolves: 240574...

[SECURITY] [DSA 1302-1] New freetype packages fix integer overflow

------------------------------------------------------------------------ Debian Security Advisory DSA-1302-1 [email protected] http://www.debian.org/security/ Steve Kemp June 10, 2007 - ------------------------------------------------------------------------ Package : freetype 2.2.1-5+etch1...

DSA-1302-1 freetype - integer overflow

Bulletin has no description...

GLSA-200705-22 : FreeType: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200705-22 FreeType: Buffer overflow Victor Stinner discovered a heap-based buffer overflow in the function GetVMetrics in src/truetype/ttgload.c when processing TTF files with a negative npoints attribute. Impact : A remote attack...

FreeType: Buffer overflow

Background FreeType is a True Type Font rendering library. Description Victor Stinner discovered a heap-based buffer overflow in the function GetVMetrics in src/truetype/ttgload.c when processing TTF files with a negative npoints attribute. Impact A remote attacker could entice a user to open a...

freetype integer overflow

Integer overflow on TTF fonts parsing leads to heap bufffer overflow...

rPSA-2007-0108-1 freetype

rPath Security Advisory: 2007-0108-1 Published: 2007-05-23 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Indirect User Deterministic Unauthorized Access Updated Versions: freetype=/conary.rpath.com@rpl:devel//1/2.1.10-5.2-1 References: https://vulners.com/cve/CVE-2007-2754...

Freetype TT_Load_Simple_Glyph() TTF文件处理整数溢出漏洞

FreeType是一个流行的字体函数库。 Freetype的truetype/ttgload.c文件中TTLoadSimpleGlyph函数处理畸形TTF图形时存在有符/无符转换错误，如果用户受骗打开了设置有负数npoints值的畸形TTF图形的话，就可能触发整数溢出和堆溢出，导致执行任意指令。 FreeType FreeType = 2.3.4 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...