Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2010-3855
HistoryOct 22, 2010 - 12:00 a.m.

CVE-2010-3855

2010-10-2200:00:00
ubuntu.com
ubuntu.com
18

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.174

Percentile

96.1%

JSON

Buffer overflow in the ft_var_readpackedpoints function in
truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to
cause a denial of service (application crash) or possibly execute arbitrary
code via a crafted TrueType GX font.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfreetype< 2.1.10-1ubuntu2.10UNKNOWN
ubuntu8.04noarchfreetype< 2.3.5-1ubuntu4.8.04.6UNKNOWN
ubuntu9.10noarchfreetype< 2.3.9-5ubuntu0.4UNKNOWN
ubuntu10.04noarchfreetype< 2.3.11-1ubuntu2.4UNKNOWN
ubuntu10.10noarchfreetype< 2.4.2-2ubuntu0.1UNKNOWN

Related

openvas 29
veracode 1
nvd 1
cve 1
fedora 5
prion 1
nessus 18
debiancve 1
redhat 1
cvelist 1
centos 1
debian 1
securityvulns 7
ubuntu 1
oraclelinux 2
gentoo 1
suse 1
openvas
openvas
Fedora Update for freetype FEDORA-2010-17742
2010-12-02 00:00:00
RedHat Update for freetype RHSA-2010:0889-01
2010-11-23 00:00:00
Fedora Update for freetype FEDORA-2010-17742
2010-12-02 00:00:00
veracode
veracode
Heap-based Buffer Overflows
2020-04-10 00:50:55
nvd
nvd
CVE-2010-3855
2010-11-26 20:00:03
cve
cve
CVE-2010-3855
2010-11-26 20:00:03
fedora
fedora
[SECURITY] Fedora 14 Update: freetype-2.4.2-4.fc14
2010-11-16 23:20:39
[SECURITY] Fedora 14 Update: freetype-2.4.2-5.fc14
2011-08-31 01:24:38
[SECURITY] Fedora 14 Update: freetype-2.4.2-7.fc14
2011-11-29 00:18:30
prion
prion
Buffer overflow
2010-11-26 20:00:00
nessus
nessus
CentOS 4 / 5 : freetype (CESA-2010:0889)
2010-11-24 00:00:00
RHEL 4 / 5 / 6 : freetype (RHSA-2010:0889)
2010-11-17 00:00:00
Oracle Linux 4 / 5 / 6 : freetype (ELSA-2010-0889)
2013-07-12 00:00:00
debiancve
debiancve
CVE-2010-3855
2010-11-26 20:00:03
redhat
redhat
(RHSA-2010:0889) Important: freetype security update
2010-11-16 00:00:00
cvelist
cvelist
CVE-2010-3855
2010-11-26 19:00:00
centos
centos
freetype security update
2010-11-16 17:01:38
debian
debian
[SECURITY] [DSA 2155-1] freetype security update
2011-01-30 19:25:45
securityvulns
securityvulns
[SECURITY] [DSA 2155-1] freetype security update
2011-02-03 00:00:00
APPLE-SA-2011-07-15-2 iOS 4.2.9 Software Update for iPhone
2011-07-18 00:00:00
APPLE-SA-2011-07-15-1 iOS 4.3.4 Software Update
2011-07-18 00:00:00
ubuntu
ubuntu
FreeType vulnerabilities
2010-11-04 00:00:00
oraclelinux
oraclelinux
freetype security update
2013-01-31 00:00:00
freetype security update
2010-11-16 00:00:00
gentoo
gentoo
FreeType: Multiple vulnerabilities
2012-01-23 00:00:00
suse
suse
Security update for freetype2 (important)
2012-04-23 18:08:18

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.174

Percentile

96.1%

JSON
Related for UB:CVE-2010-3855
openvas29veracode1nvd1cve1fedora5prion1nessus18debiancve1redhat1cvelist1centos1debian1securityvulns7ubuntu1oraclelinux2gentoo1suse1