Lucene search
SuseSUSE-SA:2007:041HistoryJul 04, 2007 - 1:46 p.m.
remote code execution in freetype2
2007-07-0413:46:33
lists.opensuse.org
11
0.616 Medium
EPSS
Percentile
97.5%
The TTF rendering library freetype2 was updated to fix an integer signedness bug when handling TTF images.
Solution
There is no known workaround, please install the update packages.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE | 10.1 | ppc | freetype2-devel | < 2.1.10-18.14 | freetype2-devel-2.1.10-18.14.ppc.rpm |
| openSUSE | 10.2 | x86_64 | freetype2-devel | < 2.2.1.20061027-15 | freetype2-devel-2.2.1.20061027-15.x86_64.rpm |
| openSUSE | 10.1 | x86_64 | freetype2-32bit | < 2.1.10-18.14 | freetype2-32bit-2.1.10-18.14.x86_64.rpm |
| openSUSE | 10.2 | x86_64 | freetype2-32bit | < 2.2.1.20061027-15 | freetype2-32bit-2.2.1.20061027-15.x86_64.rpm |
| SUSE Linux Enterprise Server | 10.1 | s390x | freetype2 | < 2.1.10-18.14 | freetype2-2.1.10-18.14.s390x.rpm |
| openSUSE | 10.0 | ppc | freetype2-devel | < 2.1.10-4.9 | freetype2-devel-2.1.10-4.9.ppc.rpm |
| SUSE Linux Enterprise Server | 10.1 | s390x | freetype2-devel | < 2.1.10-18.14 | freetype2-devel-2.1.10-18.14.s390x.rpm |
| openSUSE | 10.0 | x86_64 | freetype2-devel | < 2.1.10-4.9 | freetype2-devel-2.1.10-4.9.x86_64.rpm |
| openSUSE | 10.2 | i586 | freetype2-devel | < 2.2.1.20061027-15 | freetype2-devel-2.2.1.20061027-15.i586.rpm |
| openSUSE | 10.0 | x86_64 | freetype2-devel-32bit | < 2.1.10-4.9 | freetype2-devel-32bit-2.1.10-4.9.x86_64.rpm |
Related
nessus
nessus
Solaris 10 (x86) : 119813-18
2018-03-12 00:00:00
Solaris 10 (sparc) : 119812-20
2018-03-12 00:00:00
Solaris 10 (x86) : 119813-24 (deprecated)
2007-02-18 00:00:00
prion
prion
Integer overflow
2007-05-17 22:30:00
Design/Logic Flaw
2007-06-26 18:30:00
securityvulns
securityvulns
freetype integer overflow
2007-05-25 00:00:00
rPSA-2007-0108-1 freetype
2007-05-25 00:00:00
OpenOffice buffer overflow
2007-06-14 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: freetype-2.3.4-3.fc7
2007-06-06 02:56:13
[SECURITY] Fedora 10 Update: freetype1-1.4-0.8.pre.fc10
2009-05-28 08:01:17
[SECURITY] Fedora 11 Update: freetype1-1.4-0.8.pre.fc11
2009-05-28 08:17:11
ubuntu
ubuntu
freetype vulnerability
2007-05-30 00:00:00
freebsd
freebsd
FreeType 2 -- Heap overflow vulnerability
2007-04-27 00:00:00
openvas
openvas
SLES10: Security update for freetype2
2009-10-13 00:00:00
SLES9: Security update for freetype2
2009-10-10 00:00:00
Debian Security Advisory DSA 1334-1 (freetype)
2008-01-17 00:00:00
redhat
redhat
(RHSA-2007:0403) Moderate: freetype security update
2007-06-11 00:00:00
(RHSA-2009:1062) Important: freetype security update
2009-05-22 00:00:00
(RHSA-2009:0329) Important: freetype security update
2009-05-22 00:00:00
centos
centos
freetype security update
2007-06-11 09:27:08
freetype security update
2007-06-12 00:56:26
freetype security update
2009-05-22 14:02:05
cve
cve
CVE-2007-2754
2007-05-17 22:30:00
CVE-2007-3408
2007-06-26 18:30:00
debian
debian
[SECURITY] [DSA 1302-1] New freetype packages fix integer overflow
2007-06-10 13:48:40
[SECURITY] [DSA 1334-1] New freetype packages fix arbitary code execution
2007-07-18 20:18:17
ubuntucve
ubuntucve
CVE-2007-2754
2007-05-17 00:00:00
CVE-2007-3408
2007-06-26 00:00:00
oraclelinux
oraclelinux
Moderate: freetype security update
2007-06-11 00:00:00
freetype security update
2009-05-26 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:19:09
gentoo
gentoo
FreeType: Buffer overflow
2007-05-30 00:00:00
OpenOffice.org: Two buffer overflows
2007-07-02 00:00:00
FreeType 1: User-assisted execution of arbitrary code
2010-06-01 00:00:00
debiancve
debiancve
CVE-2007-2754
2007-05-17 22:30:00
CVE-2007-3408
2007-06-26 18:30:00