CVE-2008-1806

Executive Summary

Informations
Name	CVE-2008-1806	First vendor Publication	2008-06-16
Vendor	Cve	Last vendor Modification	2013-05-14

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

Impacts

Provides unauthorized access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1806

CWE : Common Weakness Enumeration

id	Name
CWE-189	Numeric Errors

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:9321

Oval ID:	oval:org.mitre.oval:def:9321
Title:	Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.
Description:	Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1806	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section freetype is earlier than 0:2.1.4-10.el3 AND freetype-devel is earlier than 0:2.1.4-10.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section freetype is earlier than 0:2.1.9-8.el4.6 AND freetype-demos is earlier than 0:2.1.9-8.el4.6 AND freetype-utils is earlier than 0:2.1.9-8.el4.6 AND freetype-devel is earlier than 0:2.1.9-8.el4.6 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section freetype is earlier than 0:2.2.1-20.el5_2 AND freetype-demos is earlier than 0:2.2.1-20.el5_2 AND freetype-devel is earlier than 0:2.2.1-20.el5_2

CPE : Common Platform Enumeration

Type	Description	Count
Application	Freetype Freetype cpe:/a:freetype:freetype:2.3.5 cpe:/a:freetype:freetype:2.3.4 cpe:/a:freetype:freetype:2.3.3 cpe:/a:freetype:freetype:1.3.1	4

Open Source Vulnerability Database (OSVDB)

id	Description
46175	FreeType2 Library Printer Font Binary (PFB) Font Handling Overflow

Internal Sources (Detail)

Source	Url
APPLE	http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
BID	http://www.securityfocus.com/bid/29640
BUGTRAQ	http://www.securityfocus.com/archive/1/archive/1/495497/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/495869/100/0/threaded
CONFIRM	http://support.apple.com/kb/HT3026 http://support.apple.com/kb/HT3129 http://support.apple.com/kb/HT3438 http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255 http://www.vmware.com/security/advisories/VMSA-2008-0014.html http://www.vmware.com/support/player/doc/releasenotes_player.html http://www.vmware.com/support/player2/doc/releasenotes_player2.html http://www.vmware.com/support/server/doc/releasenotes_server.html http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html https://issues.rpath.com/browse/RPL-2608
FEDORA	https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html
FULLDISC	http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html
GENTOO	http://security.gentoo.org/glsa/glsa-200806-10.xml http://security.gentoo.org/glsa/glsa-201209-25.xml
IDEFENSE	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=715
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2008:121
MISC	http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780
REDHAT	http://www.redhat.com/support/errata/RHSA-2008-0556.html http://www.redhat.com/support/errata/RHSA-2008-0558.html
SECTRACK	http://securitytracker.com/id?1020238
SECUNIA	http://secunia.com/advisories/30600 http://secunia.com/advisories/30721 http://secunia.com/advisories/30740 http://secunia.com/advisories/30766 http://secunia.com/advisories/30819 http://secunia.com/advisories/30821 http://secunia.com/advisories/30967 http://secunia.com/advisories/31479 http://secunia.com/advisories/31577 http://secunia.com/advisories/31707 http://secunia.com/advisories/31709 http://secunia.com/advisories/31711 http://secunia.com/advisories/31712 http://secunia.com/advisories/31823 http://secunia.com/advisories/31856 http://secunia.com/advisories/31900 http://secunia.com/advisories/33937
SUNALERT	http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1
SUSE	http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
UBUNTU	http://www.ubuntu.com/usn/usn-643-1
VUPEN	http://www.vupen.com/english/advisories/2008/1794 http://www.vupen.com/english/advisories/2008/1876/references http://www.vupen.com/english/advisories/2008/2423 http://www.vupen.com/english/advisories/2008/2466 http://www.vupen.com/english/advisories/2008/2525 http://www.vupen.com/english/advisories/2008/2558

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-16 17:02:28	Multiple Updates
2013-05-11 00:15:05	Multiple Updates

Type	Count
Oval ID(s)	1
CPE ID(s)	4
osvdb(s)	1

Related	Severity
VMSA-2008-0014	(Critical)
GLSA-201209-25	(Critical)
USN-643-1	(High)
SUN-239006	(High)
RHSA-2008:0558	(High)
RHSA-2008:0556	(High)
MDVSA-2008:121-1	(High)
MDVSA-2008:121	(High)
GLSA-200806-10	(High)
DSA-1635	(High)