Red Hat Security AdvisoryRHSA-2010:0737
freetype security update
Released 2010-10-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) freetype-2.2.1-28.el5_5, freetype-2.2.1-28.el5_5.i386, freetype-2.2.1-28.el5_5.ia64 +9
- Red Hat Enterprise Linux AS version 4 freetype-2.1.9-17.el4.8, freetype-2.1.9-17.el4.8.i386, freetype-2.1.9-17.el4.8.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) freetype-2.2.1-28.el5_5, freetype-2.2.1-28.el5_5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) freetype-2.2.1-28.el5_5, freetype-demos-2.2.1-28.el5_5, freetype-demos-2.2.1-28.el5_5.i386 +2
- Red Hat Enterprise Linux Desktop version 4 freetype-2.1.9-17.el4.8, freetype-2.1.9-17.el4.8.i386, freetype-demos-2.1.9-17.el4.8 +5
- Red Hat Enterprise Linux ES version 4 freetype-2.1.9-17.el4.8, freetype-2.1.9-17.el4.8.i386, freetype-2.1.9-17.el4.8.ia64 +9
- Red Hat Enterprise Linux WS version 4 freetype-2.1.9-17.el4.8, freetype-2.1.9-17.el4.8.i386, freetype-2.1.9-17.el4.8.ia64 +9
Fixes 4 records
Priority MEDIUM 50
Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06735 · Published 2011-01-07 · Fixed CWE-189
Priority LOW 39
Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative siz…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05839 · Published 2010-08-19 · Fixed CWE-129
Priority LOW 37
Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrar…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04498 · Published 2010-08-19 · Fixed CWE-120
Priority LOW 29
Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, relat…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03329 · Published 2010-08-19 · Fixed
THREATIST.IORead the docs