Red Hat Security AdvisoryRHSA-2009:0329
freetype security update
Released 2009-05-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 freetype-2.1.4-12.el3, freetype-2.1.4-12.el3.i386, freetype-devel-2.1.4-12.el3 +1
- Red Hat Enterprise Linux AS version 3 freetype-2.1.4-12.el3, freetype-2.1.4-12.el3.i386, freetype-2.1.4-12.el3.ia64 +5
- Red Hat Enterprise Linux AS version 4 freetype-2.1.9-10.el4.7, freetype-2.1.9-10.el4.7.i386, freetype-2.1.9-10.el4.7.ia64 +13
- Red Hat Enterprise Linux Desktop version 4 freetype-2.1.9-10.el4.7, freetype-2.1.9-10.el4.7.i386, freetype-demos-2.1.9-10.el4.7 +5
- Red Hat Enterprise Linux ES version 3 freetype-2.1.4-12.el3, freetype-2.1.4-12.el3.i386, freetype-2.1.4-12.el3.ia64 +3
- Red Hat Enterprise Linux ES version 4 freetype-2.1.9-10.el4.7, freetype-2.1.9-10.el4.7.i386, freetype-2.1.9-10.el4.7.ia64 +9
- Red Hat Enterprise Linux WS version 3 freetype-2.1.4-12.el3, freetype-2.1.4-12.el3.i386, freetype-2.1.4-12.el3.ia64 +3
- Red Hat Enterprise Linux WS version 4 freetype-2.1.9-10.el4.7, freetype-2.1.9-10.el4.7.i386, freetype-2.1.9-10.el4.7.ia64 +9
Fixes 4 records
Priority MEDIUM 44
Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cff…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.08541 · Published 2009-04-17 · Fixed CWE-190
Priority MEDIUM 41
Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04814 · Published 2006-05-23 · Fixed CWE-189
Priority MEDIUM 40
Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04217 · Published 2008-06-16 · Fixed CWE-189
Priority LOW 39
Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overfl…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05786 · Published 2007-05-17 · Fixed
THREATIST.IORead the docs