Red Hat Security AdvisoryRHSA-2010:0736
freetype security update
Released 2010-10-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 freetype-2.1.4-18.el3, freetype-2.1.4-18.el3.i386, freetype-devel-2.1.4-18.el3 +1
- Red Hat Enterprise Linux AS version 3 freetype-2.1.4-18.el3, freetype-2.1.4-18.el3.i386, freetype-2.1.4-18.el3.ia64 +5
- Red Hat Enterprise Linux ES version 3 freetype-2.1.4-18.el3, freetype-2.1.4-18.el3.i386, freetype-2.1.4-18.el3.ia64 +3
- Red Hat Enterprise Linux WS version 3 freetype-2.1.4-18.el3, freetype-2.1.4-18.el3.i386, freetype-2.1.4-18.el3.ia64 +3
Fixes 3 records
Priority MEDIUM 50
Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06735 · Published 2011-01-07 · Fixed CWE-189
Priority LOW 39
Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative siz…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05839 · Published 2010-08-19 · Fixed CWE-129
Priority LOW 29
Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, relat…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03329 · Published 2010-08-19 · Fixed
THREATIST.IORead the docs