Red Hat Security AdvisoryRHSA-2010:0578
freetype security update
Released 2010-07-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) freetype-2.2.1-25.el5_5, freetype-2.2.1-25.el5_5.i386, freetype-2.2.1-25.el5_5.ia64 +9
- Red Hat Enterprise Linux AS version 4 freetype-2.1.9-14.el4.8, freetype-2.1.9-14.el4.8.i386, freetype-2.1.9-14.el4.8.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) freetype-2.2.1-25.el5_5, freetype-2.2.1-25.el5_5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) freetype-2.2.1-25.el5_5, freetype-demos-2.2.1-25.el5_5, freetype-demos-2.2.1-25.el5_5.i386 +2
- Red Hat Enterprise Linux Desktop version 4 freetype-2.1.9-14.el4.8, freetype-2.1.9-14.el4.8.i386, freetype-demos-2.1.9-14.el4.8 +5
- Red Hat Enterprise Linux ES version 4 freetype-2.1.9-14.el4.8, freetype-2.1.9-14.el4.8.i386, freetype-2.1.9-14.el4.8.ia64 +9
- Red Hat Enterprise Linux WS version 4 freetype-2.1.9-14.el4.8, freetype-2.1.9-14.el4.8.i386, freetype-2.1.9-14.el4.8.ia64 +9
Fixes 6 records
Priority LOW 39
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05644 · Published 2010-08-19 · Fixed CWE-120
Priority LOW 39
Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.06287 · Published 2010-08-19 · Fixed CWE-787
Priority LOW 39
Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted L…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.06194 · Published 2010-08-19 · Fixed CWE-120
Priority LOW 39
The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and a…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05638 · Published 2010-08-19 · Fixed CWE-787
Priority LOW 38
Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04782 · Published 2010-08-19 · Partial fix CWE-120
Priority LOW 38
Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted fon…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04991 · Published 2010-08-19 · Fixed CWE-190
THREATIST.IORead the docs