Red Hat Security AdvisoryRHSA-2008:0558
freetype security update
Released 2008-06-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 freetype-2.0.3-15.el21, freetype-2.0.3-15.el21.i386, freetype-2.0.3-15.el21.ia64 +4
- Red Hat Enterprise Linux ES version 2.1 freetype-2.0.3-15.el21, freetype-2.0.3-15.el21.i386, freetype-devel-2.0.3-15.el21.i386 +1
- Red Hat Enterprise Linux WS version 2.1 freetype-2.0.3-15.el21, freetype-2.0.3-15.el21.i386, freetype-devel-2.0.3-15.el21.i386 +1
- Red Hat Linux Advanced Workstation 2.1 freetype-2.0.3-15.el21, freetype-2.0.3-15.el21.ia64, freetype-devel-2.0.3-15.el21.ia64 +1
Fixes 3 records
Priority MEDIUM 40
Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04217 · Published 2008-06-16 · Fixed CWE-189
Priority MEDIUM 40
Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, w…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0407 · Published 2008-06-16 · Fixed CWE-189
Priority LOW 39
FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading t…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03585 · Published 2008-06-16 · Fixed CWE-189
THREATIST.IORead the docs