FreeType vulnerabilities

2010-07-2000:00:00

ubuntu.com

8.7 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.016 Low

EPSS

Percentile

87.0%

JSON

Releases

Ubuntu 10.04
Ubuntu 9.10
Ubuntu 9.04
Ubuntu 8.04
Ubuntu 6.06

Packages

freetype -

Details

Robert Święcki discovered that FreeType did not correctly handle certain
malformed font files. If a user were tricked into using a specially crafted
font file, a remote attacker could execute arbitrary code with user
privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchlibfreetype6< 2.3.9-5ubuntu0.1UNKNOWN
Ubuntu9.10noarchfreetype2-demos< 2.3.9-5ubuntu0.1UNKNOWN
Ubuntu9.10noarchlibfreetype6-dev< 2.3.9-5ubuntu0.1UNKNOWN
Ubuntu9.10noarchlibfreetype6-udeb< 2.3.9-5ubuntu0.1UNKNOWN
Ubuntu9.04noarchlibfreetype6< 2.3.9-4ubuntu0.2UNKNOWN
Ubuntu9.04noarchfreetype2-demos< 2.3.9-4ubuntu0.2UNKNOWN
Ubuntu9.04noarchlibfreetype6< dev-2.3.9-4ubuntu0.2UNKNOWN
Ubuntu9.04noarchlibfreetype6< udeb-2.3.9-4ubuntu0.2UNKNOWN
Ubuntu8.04noarchlibfreetype6< 2.3.5-1ubuntu4.8.04.3UNKNOWN
Ubuntu8.04noarchfreetype2-demos< 2.3.5-1ubuntu4.8.04.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.10	noarch	libfreetype6	< 2.3.9-5ubuntu0.1	UNKNOWN
Ubuntu	9.10	noarch	freetype2-demos	< 2.3.9-5ubuntu0.1	UNKNOWN
Ubuntu	9.10	noarch	libfreetype6-dev	< 2.3.9-5ubuntu0.1	UNKNOWN
Ubuntu	9.10	noarch	libfreetype6-udeb	< 2.3.9-5ubuntu0.1	UNKNOWN
Ubuntu	9.04	noarch	libfreetype6	< 2.3.9-4ubuntu0.2	UNKNOWN
Ubuntu	9.04	noarch	freetype2-demos	< 2.3.9-4ubuntu0.2	UNKNOWN
Ubuntu	9.04	noarch	libfreetype6	< dev-2.3.9-4ubuntu0.2	UNKNOWN
Ubuntu	9.04	noarch	libfreetype6	< udeb-2.3.9-4ubuntu0.2	UNKNOWN
Ubuntu	8.04	noarch	libfreetype6	< 2.3.5-1ubuntu4.8.04.3	UNKNOWN
Ubuntu	8.04	noarch	freetype2-demos	< 2.3.5-1ubuntu4.8.04.3	UNKNOWN