Red Hat Security AdvisoryRHSA-2009:1062
freetype security update
Released 2009-05-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 freetype-2.0.3-17.el21, freetype-2.0.3-17.el21.i386, freetype-2.0.3-17.el21.ia64 +4
- Red Hat Enterprise Linux ES version 2.1 freetype-2.0.3-17.el21, freetype-2.0.3-17.el21.i386, freetype-devel-2.0.3-17.el21.i386 +1
- Red Hat Enterprise Linux WS version 2.1 freetype-2.0.3-17.el21, freetype-2.0.3-17.el21.i386, freetype-devel-2.0.3-17.el21.i386 +1
- Red Hat Linux Advanced Workstation 2.1 freetype-2.0.3-17.el21, freetype-2.0.3-17.el21.ia64, freetype-devel-2.0.3-17.el21.ia64 +1
Fixes 3 records
Priority MEDIUM 44
Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cff…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.08541 · Published 2009-04-17 · Fixed CWE-190
Priority MEDIUM 41
Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04814 · Published 2006-05-23 · Fixed CWE-189
Priority LOW 39
Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overfl…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05786 · Published 2007-05-17 · Fixed
THREATIST.IORead the docs