Arbitrary Code Execution

2020-04-1000:49:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

freetype is vulnerable to arbitrary code execution. The vulnerability exists if a user loaded a carefully-crafted font file with a demo application, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application.

CPENameOperatorVersion
freetypeeq2.2.1__21.el5_3
freetypeeq2.1.4__12.el3
freetypeeq2.1.4__5.el3
freetypeeq2.1.9__10.el4.7
freetypeeq2.1.9__7.el4.6
freetypeeq2.2.1__20.el5_2
freetypeeq2.2.1__19.el5
freetypeeq2.1.4__6.el3
freetypeeq2.1.9__4.el4
freetypeeq2.1.4__10.el3

Name	Operator	Version
freetype	eq	2.2.1__21.el5_3
freetype	eq	2.1.4__12.el3
freetype	eq	2.1.4__5.el3
freetype	eq	2.1.9__10.el4.7
freetype	eq	2.1.9__7.el4.6
freetype	eq	2.2.1__20.el5_2
freetype	eq	2.2.1__19.el5
freetype	eq	2.1.4__6.el3
freetype	eq	2.1.9__4.el4
freetype	eq	2.1.4__10.el3