Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2008-1807
HistoryJun 16, 2008 - 12:00 a.m.

CVE-2008-1807

2008-06-1600:00:00
ubuntu.com
ubuntu.com
8

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON

FreeType2 before 2.3.6 allow context-dependent attackers to execute
arbitrary code via an invalid “number of axes” field in a Printer Font
Binary (PFB) file, which triggers a free of arbitrary memory locations,
leading to memory corruption.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfreetype< 2.1.10-1ubuntu2.5UNKNOWN
ubuntu7.04noarchfreetype< 2.2.1-5ubuntu1.2UNKNOWN
ubuntu7.10noarchfreetype< 2.3.5-1ubuntu4.7.10.1UNKNOWN
ubuntu8.04noarchfreetype< 2.3.5-1ubuntu4.8.04.1UNKNOWN

Related

securityvulns 4
cve 1
prion 1
debiancve 1
veracode 1
openvas 33
nessus 16
centos 2
redhat 2
fedora 2
gentoo 2
ubuntu 1
osv 1
debian 1
oraclelinux 1
freebsd 1
vmware 2
securityvulns
securityvulns
iDefense Security Advisory 06.10.08: Multiple Vendor FreeType2 PFB Memory Corruption Vulnerability
2008-06-10 00:00:00
FreeType2 library multiple security vulnerabilities
2008-06-10 00:00:00
VMWare multiple applications security vulnerabilities
2008-09-02 00:00:00
cve
cve
CVE-2008-1807
2008-06-16 19:41:00
prion
prion
Memory corruption
2008-06-16 19:41:00
debiancve
debiancve
CVE-2008-1807
2008-06-16 19:41:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:23:03
openvas
openvas
CentOS Update for freetype CESA-2008:0556 centos4 i386
2009-02-27 00:00:00
RedHat Update for freetype RHSA-2008:0558-01
2009-03-06 00:00:00
Fedora Update for freetype FEDORA-2008-5425
2009-02-17 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : freetype2 (MDVSA-2008:121)
2009-04-23 00:00:00
CentOS 3 / 4 / 5 : freetype (CESA-2008:0556)
2008-06-24 00:00:00
Fedora 8 : freetype-2.3.5-4.fc8 (2008-5430)
2008-06-19 00:00:00
centos
centos
security update
2008-06-22 23:50:06
freetype security update
2008-06-20 15:05:03
redhat
redhat
(RHSA-2008:0556) Important: freetype security update
2008-06-20 00:00:00
(RHSA-2008:0558) Important: freetype security update
2008-06-20 00:00:00
fedora
fedora
[SECURITY] Fedora 9 Update: freetype-2.3.5-6.fc9
2008-06-18 03:15:22
[SECURITY] Fedora 8 Update: freetype-2.3.5-4.fc8
2008-06-18 03:15:47
gentoo
gentoo
FreeType: User-assisted execution of arbitrary code
2008-06-23 00:00:00
VMware Player, Server, Workstation: Multiple vulnerabilities
2012-09-29 00:00:00
ubuntu
ubuntu
FreeType vulnerabilities
2008-09-11 00:00:00
osv
osv
freetype - multiple vulnerabilities
2008-09-10 00:00:00
debian
debian
[SECURITY] [DSA 1635-1] New freetype packages fix multiple vulnerabilities
2008-09-10 19:45:14
oraclelinux
oraclelinux
freetype security update
2008-06-20 00:00:00
freebsd
freebsd
FreeType 2 -- Multiple Vulnerabilities
2008-06-10 00:00:00
vmware
vmware
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.
2008-08-29 00:00:00
Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.
2008-08-29 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON
Related for UB:CVE-2008-1807
securityvulns4cve1prion1debiancve1veracode1openvas33nessus16centos2redhat2fedora2gentoo2ubuntu1osv1debian1oraclelinux1freebsd1vmware2