Red Hat Security AdvisoryRHSA-2010:0577
freetype security update
Released 2010-07-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 freetype-2.1.4-15.el3, freetype-2.1.4-15.el3.i386, freetype-devel-2.1.4-15.el3 +1
- Red Hat Enterprise Linux AS version 3 freetype-2.1.4-15.el3, freetype-2.1.4-15.el3.i386, freetype-2.1.4-15.el3.ia64 +5
- Red Hat Enterprise Linux ES version 3 freetype-2.1.4-15.el3, freetype-2.1.4-15.el3.i386, freetype-2.1.4-15.el3.ia64 +3
- Red Hat Enterprise Linux WS version 3 freetype-2.1.4-15.el3, freetype-2.1.4-15.el3.i386, freetype-2.1.4-15.el3.ia64 +3
Fixes 3 records
Priority LOW 39
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05644 · Published 2010-08-19 · Fixed CWE-120
Priority LOW 38
Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04782 · Published 2010-08-19 · Partial fix CWE-120
Priority LOW 38
Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted fon…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04991 · Published 2010-08-19 · Fixed CWE-190
THREATIST.IORead the docs