FreeType vulnerability

2009-04-2700:00:00

ubuntu.com

9.9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.036 Low

EPSS

Percentile

91.6%

JSON

Releases

Ubuntu 9.04
Ubuntu 8.10
Ubuntu 8.04
Ubuntu 6.06

Packages

freetype -

Details

Tavis Ormandy discovered that FreeType did not correctly handle certain
large values in font files. If a user were tricked into using a specially
crafted font file, a remote attacker could execute arbitrary code with user
privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.04noarchlibfreetype6< 2.3.9-4ubuntu0.1UNKNOWN
Ubuntu9.04noarchfreetype2-demos< 2.3.9-4ubuntu0.1UNKNOWN
Ubuntu9.04noarchlibfreetype6< dev-2.3.9-4ubuntu0.1UNKNOWN
Ubuntu9.04noarchlibfreetype6< udeb-2.3.9-4ubuntu0.1UNKNOWN
Ubuntu8.10noarchlibfreetype6< 2.3.7-2ubuntu1.1UNKNOWN
Ubuntu8.10noarchfreetype2-demos< 2.3.7-2ubuntu1.1UNKNOWN
Ubuntu8.10noarchlibfreetype6-dev< 2.3.7-2ubuntu1.1UNKNOWN
Ubuntu8.10noarchlibfreetype6-udeb< 2.3.7-2ubuntu1.1UNKNOWN
Ubuntu8.04noarchlibfreetype6< 2.3.5-1ubuntu4.8.04.2UNKNOWN
Ubuntu8.04noarchfreetype2-demos< 2.3.5-1ubuntu4.8.04.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.04	noarch	libfreetype6	< 2.3.9-4ubuntu0.1	UNKNOWN
Ubuntu	9.04	noarch	freetype2-demos	< 2.3.9-4ubuntu0.1	UNKNOWN
Ubuntu	9.04	noarch	libfreetype6	< dev-2.3.9-4ubuntu0.1	UNKNOWN
Ubuntu	9.04	noarch	libfreetype6	< udeb-2.3.9-4ubuntu0.1	UNKNOWN
Ubuntu	8.10	noarch	libfreetype6	< 2.3.7-2ubuntu1.1	UNKNOWN
Ubuntu	8.10	noarch	freetype2-demos	< 2.3.7-2ubuntu1.1	UNKNOWN
Ubuntu	8.10	noarch	libfreetype6-dev	< 2.3.7-2ubuntu1.1	UNKNOWN
Ubuntu	8.10	noarch	libfreetype6-udeb	< 2.3.7-2ubuntu1.1	UNKNOWN
Ubuntu	8.04	noarch	libfreetype6	< 2.3.5-1ubuntu4.8.04.2	UNKNOWN
Ubuntu	8.04	noarch	freetype2-demos	< 2.3.5-1ubuntu4.8.04.2	UNKNOWN