Red Hat Security AdvisoryRHSA-2010:0864
freetype security update
Released 2010-11-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) freetype-2.3.11-6.el6_0.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) freetype-2.3.11-6.el6_0.1, freetype-demos-2.3.11-6.el6_0.1, freetype-devel-2.3.11-6.el6_0.1
- Red Hat Enterprise Linux HPC Node (v. 6) freetype-2.3.11-6.el6_0.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) freetype-2.3.11-6.el6_0.1, freetype-demos-2.3.11-6.el6_0.1, freetype-devel-2.3.11-6.el6_0.1
- Red Hat Enterprise Linux Server (v. 6) freetype-2.3.11-6.el6_0.1, freetype-2.3.11-6.el6_0.1.ppc, freetype-devel-2.3.11-6.el6_0.1 +1
- Red Hat Enterprise Linux Server Optional (v. 6) freetype-2.3.11-6.el6_0.1, freetype-demos-2.3.11-6.el6_0.1
- Red Hat Enterprise Linux Workstation (v. 6) freetype-2.3.11-6.el6_0.1, freetype-devel-2.3.11-6.el6_0.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) freetype-2.3.11-6.el6_0.1, freetype-demos-2.3.11-6.el6_0.1
Fixes 4 records
Priority MEDIUM 50
Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06735 · Published 2011-01-07 · Fixed CWE-189
Priority LOW 39
Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative siz…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05839 · Published 2010-08-19 · Fixed CWE-129
Priority LOW 38
The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05111 · Published 2010-08-19 · Fixed CWE-20
Priority LOW 37
Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrar…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04498 · Published 2010-08-19 · Fixed CWE-120
THREATIST.IORead the docs