9.3 - RHSA-2010:0864

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	freetype security update

Informations
Name	RHSA-2010:0864	First vendor Publication	2010-11-10
Vendor	RedHat	Last vendor Modification	2010-11-10
Severity (Vendor)	Important	Revision	02

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

Updated freetype packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64

3. Description:

FreeType is a free, high-quality, portable font engine that can open and manage font files. It also loads, hints, and renders individual glyphs efficiently. These packages provide the FreeType 2 font engine.

It was found that the FreeType font rendering engine improperly validated certain position values when processing input streams. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2010-2805, CVE-2010-3311)

A stack-based buffer overflow flaw was found in the way the FreeType font rendering engine processed some PostScript Type 1 fonts. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2010-2808)

An array index error was found in the way the FreeType font rendering engine processed certain PostScript Type 42 font files. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2010-2806)

Note: All of the issues in this erratum only affect the FreeType 2 font engine.

Users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The X server must be restarted (log out, then log back in) for this update to take effect.

4. Solution:

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

621907 - CVE-2010-2808 FreeType: Stack-based buffer overflow by processing certain LWFN fonts 621980 - CVE-2010-2806 FreeType: Heap-based buffer overflow by processing FontType42 fonts with negative length of SFNT strings (FT bug #30656) 623625 - CVE-2010-3311 freetype: Input stream position error by processing Compact Font Format (CFF) font files 625626 - CVE-2010-2805 freetype: FT_Stream_EnterFrame() does not properly validate certain position values

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2010-0864.html

CWE : Common Weakness Enumeration

%	Id	Name
25 %	CWE-189	Numeric Errors (CWE/SANS Top 25)
25 %	CWE-129	Improper Validation of Array Index
25 %	CWE-120	Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') (CWE/SANS Top 25)
25 %	CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:12591

Oval ID:	oval:org.mitre.oval:def:12591
Title:	DSA-2116-1 poppler -- several
Description:	Joel Voss of Leviathan Security Group discovered two vulnerabilities in the Poppler PDF rendering library, which may lead to the execution of arbitrary code if a malformed PDF file is opened. For the stable distribution, these problems have been fixed in version 0.8.7-4. For the unstable distribution, these problems will be fixed soon. We recommend that you upgrade your poppler packages.
Family:	unix	Class:	patch
Reference(s):	DSA-2116-1 CVE-2010-3311	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	poppler
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa Packages section poppler-utils DPKG is earlier than 0.8.7-4 AND libpoppler-qt4-3 DPKG is earlier than 0.8.7-4 AND libpoppler-dev DPKG is earlier than 0.8.7-4 AND libpoppler-qt-dev DPKG is earlier than 0.8.7-4 AND libpoppler3 DPKG is earlier than 0.8.7-4 AND libpoppler-qt4-dev DPKG is earlier than 0.8.7-4 AND libpoppler-glib-dev DPKG is earlier than 0.8.7-4 AND libpoppler-glib3 DPKG is earlier than 0.8.7-4 AND poppler-dbg DPKG is earlier than 0.8.7-4 AND libpoppler-qt2 DPKG is earlier than 0.8.7-4

Definition Id: oval:org.mitre.oval:def:13149

Oval ID:	oval:org.mitre.oval:def:13149
Title:	USN-972-1 -- freetype vulnerabilities
Description:	It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges.
Family:	unix	Class:	patch
Reference(s):	USN-972-1 CVE-2010-1797 CVE-2010-2541 CVE-2010-2805 CVE-2010-2806 CVE-2010-2807 CVE-2010-2808	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	freetype
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libfreetype6-dev DPKG is earlier than 2.3.5-1ubuntu4.8.04.4 AND libfreetype6-udeb DPKG is earlier than 2.3.5-1ubuntu4.8.04.4 AND freetype2-demos DPKG is earlier than 2.3.5-1ubuntu4.8.04.4 AND libfreetype6 DPKG is earlier than 2.3.5-1ubuntu4.8.04.4 OR Release section Ubuntu 10.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section libfreetype6-dev DPKG is earlier than 2.3.11-1ubuntu2.2 AND libfreetype6-udeb DPKG is earlier than 2.3.11-1ubuntu2.2 AND freetype2-demos DPKG is earlier than 2.3.11-1ubuntu2.2 AND libfreetype6 DPKG is earlier than 2.3.11-1ubuntu2.2 OR Release section Ubuntu 9.10 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libfreetype6-dev DPKG is earlier than 2.3.9-5ubuntu0.2 AND libfreetype6-udeb DPKG is earlier than 2.3.9-5ubuntu0.2 AND freetype2-demos DPKG is earlier than 2.3.9-5ubuntu0.2 AND libfreetype6 DPKG is earlier than 2.3.9-5ubuntu0.2 OR Release section Ubuntu 6.06 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section libfreetype6-dev DPKG is earlier than 2.1.10-1ubuntu2.8 AND libfreetype6-udeb DPKG is earlier than 2.1.10-1ubuntu2.8 AND freetype2-demos DPKG is earlier than 2.1.10-1ubuntu2.8 AND libfreetype6 DPKG is earlier than 2.1.10-1ubuntu2.8 OR Release section Ubuntu 9.04 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section libfreetype6-dev DPKG is earlier than 2.3.9-4ubuntu0.3 AND libfreetype6-udeb DPKG is earlier than 2.3.9-4ubuntu0.3 AND freetype2-demos DPKG is earlier than 2.3.9-4ubuntu0.3 AND libfreetype6 DPKG is earlier than 2.3.9-4ubuntu0.3

Definition Id: oval:org.mitre.oval:def:22238

Oval ID:	oval:org.mitre.oval:def:22238
Title:	RHSA-2010:0864: freetype security update (Important)
Description:	Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an "input stream position error" issue, a different vulnerability than CVE-2010-1797.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0864-02 CVE-2010-2805 CVE-2010-2806 CVE-2010-2808 CVE-2010-3311	Version:	55
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	freetype
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section freetype-demos is earlier than 0:2.3.11-6.el6_0.1 AND freetype is earlier than 0:2.3.11-6.el6_0.1 AND freetype-devel is earlier than 0:2.3.11-6.el6_0.1

Definition Id: oval:org.mitre.oval:def:22379

Oval ID:	oval:org.mitre.oval:def:22379
Title:	RHSA-2010:0737: freetype security update (Important)
Description:	Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an "input stream position error" issue, a different vulnerability than CVE-2010-1797.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0737-01 CESA-2010:0737 CVE-2010-2806 CVE-2010-2808 CVE-2010-3054 CVE-2010-3311	Version:	55
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	freetype
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section freetype is earlier than 0:2.2.1-28.el5_5 AND freetype-demos is earlier than 0:2.2.1-28.el5_5 AND freetype-devel is earlier than 0:2.2.1-28.el5_5

Definition Id: oval:org.mitre.oval:def:23017

Oval ID:	oval:org.mitre.oval:def:23017
Title:	ELSA-2010:0737: freetype security update (Important)
Description:	Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an "input stream position error" issue, a different vulnerability than CVE-2010-1797.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0737-01 CVE-2010-2806 CVE-2010-2808 CVE-2010-3054 CVE-2010-3311	Version:	21
Platform(s):	Oracle Linux 5	Product(s):	freetype
Definition Synopsis:
Oracle Linux 5.x rpm test freetype is earlier than 0:2.2.1-28.el5_5 AND freetype-demos is earlier than 0:2.2.1-28.el5_5 AND freetype-devel is earlier than 0:2.2.1-28.el5_5

Definition Id: oval:org.mitre.oval:def:23494

Oval ID:	oval:org.mitre.oval:def:23494
Title:	ELSA-2010:0864: freetype security update (Important)
Description:	Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an "input stream position error" issue, a different vulnerability than CVE-2010-1797.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0864-02 CVE-2010-2805 CVE-2010-2806 CVE-2010-2808 CVE-2010-3311	Version:	21
Platform(s):	Oracle Linux 6	Product(s):	freetype
Definition Synopsis:
Oracle Linux 6.x rpm test freetype-demos is earlier than 0:2.3.11-6.el6_0.1 AND freetype is earlier than 0:2.3.11-6.el6_0.1 AND freetype-devel is earlier than 0:2.3.11-6.el6_0.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apple Mac Os X cpe:2.3:a:apple:mac_os_x:10.5.6:::::::* cpe:2.3:a:apple:mac_os_x::::::::	2
Application	Freetype cpe:2.3:a:freetype:freetype:2.4.1:::::::* cpe:2.3:a:freetype:freetype:2.4.0:::::::* cpe:2.3:a:freetype:freetype:2.3.9:::::::* cpe:2.3:a:freetype:freetype:2.3.8:::::::* cpe:2.3:a:freetype:freetype:2.3.7:::::::* cpe:2.3:a:freetype:freetype:2.3.6:::::::* cpe:2.3:a:freetype:freetype:2.3.5:::::::* cpe:2.3:a:freetype:freetype:2.3.4:::::::* cpe:2.3:a:freetype:freetype:2.3.3:::::::* cpe:2.3:a:freetype:freetype:2.3.2:::::::* cpe:2.3:a:freetype:freetype:2.3.12:::::::* cpe:2.3:a:freetype:freetype:2.3.11:::::::* cpe:2.3:a:freetype:freetype:2.3.10:::::::* cpe:2.3:a:freetype:freetype:2.3.1:::::::* cpe:2.3:a:freetype:freetype:2.3.0:-:::::: cpe:2.3:a:freetype:freetype:2.2.10:::::::* cpe:2.3:a:freetype:freetype:2.2.1:::::::* cpe:2.3:a:freetype:freetype:2.2.0:-:::::: cpe:2.3:a:freetype:freetype:2.2.0:::::::* cpe:2.3:a:freetype:freetype:2.1.9:::::::* cpe:2.3:a:freetype:freetype:2.1.8:-:::::: cpe:2.3:a:freetype:freetype:2.1.8:rc1:::::: cpe:2.3:a:freetype:freetype:2.1.7:::::::* cpe:2.3:a:freetype:freetype:2.1.6:::::::* cpe:2.3:a:freetype:freetype:2.1.5:-:::::: cpe:2.3:a:freetype:freetype:2.1.4:-:::::: cpe:2.3:a:freetype:freetype:2.1.3:::::::* cpe:2.3:a:freetype:freetype:2.1.10:::::::* cpe:2.3:a:freetype:freetype:2.1:::::::* cpe:2.3:a:freetype:freetype:2.0.9:::::::* cpe:2.3:a:freetype:freetype:2.0.8:::::::* cpe:2.3:a:freetype:freetype:2.0.7:::::::* cpe:2.3:a:freetype:freetype:2.0.6:::::::* cpe:2.3:a:freetype:freetype:2.0.5:::::::* cpe:2.3:a:freetype:freetype:2.0.4:::::::* cpe:2.3:a:freetype:freetype:2.0.3:::::::* cpe:2.3:a:freetype:freetype:2.0.2:::::::* cpe:2.3:a:freetype:freetype:2.0.1:::::::* cpe:2.3:a:freetype:freetype:2.0.0:-:::::: cpe:2.3:a:freetype:freetype:2.0.0:::::::* cpe:2.3:a:freetype:freetype:1.3.1:::::::* cpe:2.3:a:freetype:freetype::::::::	42
Os	Apple Iphone Os cpe:2.3:o:apple:iphone_os:4.1:::::::* cpe:2.3:o:apple:iphone_os:4.0.2:::::::* cpe:2.3:o:apple:iphone_os:4.0.2:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:4.0.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:4.0.1:::::::* cpe:2.3:o:apple:iphone_os:4.0.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:4.0.1:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:4.0:::::::* cpe:2.3:o:apple:iphone_os:4.0:-:iphone:::::* cpe:2.3:o:apple:iphone_os:4.0:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:3.2.2:::::::* cpe:2.3:o:apple:iphone_os:3.2.2:-:ipad:::::* cpe:2.3:o:apple:iphone_os:3.2.1:::::::* cpe:2.3:o:apple:iphone_os:3.2.1:-:ipad:::::* cpe:2.3:o:apple:iphone_os:3.2:::::::* cpe:2.3:o:apple:iphone_os:3.2:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:3.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:3.1.3:::::::* cpe:2.3:o:apple:iphone_os:3.1.3:-:iphone:::::* cpe:2.3:o:apple:iphone_os:3.1.3:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:3.1.2:::::::* cpe:2.3:o:apple:iphone_os:3.1.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:3.1.2:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:3.1.1:::::ipod_touch:: cpe:2.3:o:apple:iphone_os:3.1:::::::* cpe:2.3:o:apple:iphone_os:3.1:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:3.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:3.1:::::ipod_touch:: cpe:2.3:o:apple:iphone_os:3.0.1:::::::* cpe:2.3:o:apple:iphone_os:3.0.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:3.0.1:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:3.0:::::::* cpe:2.3:o:apple:iphone_os:3.0:-:iphone:::::* cpe:2.3:o:apple:iphone_os:3.0:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.2.1:::::::* cpe:2.3:o:apple:iphone_os:2.2.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:2.2.1:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.2:::::::* cpe:2.3:o:apple:iphone_os:2.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:2.2:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.1.1:::::::* cpe:2.3:o:apple:iphone_os:2.1:::::::* cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:2.0.2:::::::* cpe:2.3:o:apple:iphone_os:2.0.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.0.1:::::::* cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.0.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:2.0.0:::::::* cpe:2.3:o:apple:iphone_os:2.0.0:-:iphone:::::* cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:2.0:::::::* cpe:2.3:o:apple:iphone_os:1.1.5:::::::* cpe:2.3:o:apple:iphone_os:1.1.5:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.1.5:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:1.1.4:::::::* cpe:2.3:o:apple:iphone_os:1.1.4:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:1.1.4:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.1.3:::::::* cpe:2.3:o:apple:iphone_os:1.1.3:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.1.3:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:1.1.2:::::::* cpe:2.3:o:apple:iphone_os:1.1.2:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:1.1.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.1.1:::::::* cpe:2.3:o:apple:iphone_os:1.1.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.1.0:::::::* cpe:2.3:o:apple:iphone_os:1.1.0:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:1.1.0:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.1:::::::* cpe:2.3:o:apple:iphone_os:1.0.2:::::::* cpe:2.3:o:apple:iphone_os:1.0.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.0.1:::::::* cpe:2.3:o:apple:iphone_os:1.0.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:1.0.0:::::::* cpe:2.3:o:apple:iphone_os:1.0:::::::* cpe:2.3:o:apple:iphone_os:::::::: cpe:2.3:o:apple:iphone_os:::~~~~ipad2~:::::* cpe:2.3:o:apple:iphone_os:::~~~~iphone~:::::* cpe:2.3:o:apple:iphone_os:::~~~~ipodtouch~:::::* cpe:2.3:o:apple:iphone_os::::::ipod_touch::* cpe:2.3:o:apple:iphone_os:::::::ipad2:* cpe:2.3:o:apple:iphone_os:::::::iphone:* cpe:2.3:o:apple:iphone_os:::::::ipodtouch:* cpe:2.3:o:apple:iphone_os:-:::::::* cpe:2.3:o:apple:iphone_os:-::~~~~ipad2~::::: cpe:2.3:o:apple:iphone_os:-::~~~~iphone~::::: cpe:2.3:o:apple:iphone_os:-::~~~~ipodtouch~::::: cpe:2.3:o:apple:iphone_os:-::::::ipad2: cpe:2.3:o:apple:iphone_os:-::::::iphone: cpe:2.3:o:apple:iphone_os:-::::::ipodtouch:	93
Os	Apple Mac Os X cpe:2.3:o:apple:mac_os_x:10.6.4:::::::* cpe:2.3:o:apple:mac_os_x:10.6.3:::::::* cpe:2.3:o:apple:mac_os_x:10.6.2:::::::* cpe:2.3:o:apple:mac_os_x:10.6.1:::::::* cpe:2.3:o:apple:mac_os_x:10.6.1::server::::: cpe:2.3:o:apple:mac_os_x:10.6.0:::::::* cpe:2.3:o:apple:mac_os_x:10.6:::::::* cpe:2.3:o:apple:mac_os_x:10.6:server:::::: cpe:2.3:o:apple:mac_os_x:10.5.8:::::::* cpe:2.3:o:apple:mac_os_x:10.5.8::server::::: cpe:2.3:o:apple:mac_os_x:10.5.7:::::::* cpe:2.3:o:apple:mac_os_x:10.5.6:::::::* cpe:2.3:o:apple:mac_os_x:10.5.5:::::::* cpe:2.3:o:apple:mac_os_x:10.5.4:::::::* cpe:2.3:o:apple:mac_os_x:10.5.3:::::::* cpe:2.3:o:apple:mac_os_x:10.5.2:::::::* cpe:2.3:o:apple:mac_os_x:10.5.2:2008-002:::::: cpe:2.3:o:apple:mac_os_x:10.5.1:::::::* cpe:2.3:o:apple:mac_os_x:10.5.0:::::::* cpe:2.3:o:apple:mac_os_x:10.5:::::::* cpe:2.3:o:apple:mac_os_x:10.4.9:::::::* cpe:2.3:o:apple:mac_os_x:10.4.8:::::::* cpe:2.3:o:apple:mac_os_x:10.4.8::macbook::::: cpe:2.3:o:apple:mac_os_x:10.4.8::mac_mini::::: cpe:2.3:o:apple:mac_os_x:10.4.8::macbook_pro::::: cpe:2.3:o:apple:mac_os_x:10.4.7:::::::* cpe:2.3:o:apple:mac_os_x:10.4.6:::::::* cpe:2.3:o:apple:mac_os_x:10.4.5:::::::* cpe:2.3:o:apple:mac_os_x:10.4.4:::::::* cpe:2.3:o:apple:mac_os_x:10.4.3:::::::* cpe:2.3:o:apple:mac_os_x:10.4.2:::::::* cpe:2.3:o:apple:mac_os_x:10.4.11:::::::* cpe:2.3:o:apple:mac_os_x:10.4.10:::::::* cpe:2.3:o:apple:mac_os_x:10.4.1:::::::* cpe:2.3:o:apple:mac_os_x:10.4.0:::::::* cpe:2.3:o:apple:mac_os_x:10.4.:::::::* cpe:2.3:o:apple:mac_os_x:10.4:::::::* cpe:2.3:o:apple:mac_os_x:10.3.9:::::::* cpe:2.3:o:apple:mac_os_x:10.3.8:::::::* cpe:2.3:o:apple:mac_os_x:10.3.7:::::::* cpe:2.3:o:apple:mac_os_x:10.3.6:::::::* cpe:2.3:o:apple:mac_os_x:10.3.5:::::::* cpe:2.3:o:apple:mac_os_x:10.3.4:::::::* cpe:2.3:o:apple:mac_os_x:10.3.3:::::::* cpe:2.3:o:apple:mac_os_x:10.3.2:::::::* cpe:2.3:o:apple:mac_os_x:10.3.1:::::::* cpe:2.3:o:apple:mac_os_x:10.3.0:::::::* cpe:2.3:o:apple:mac_os_x:10.3:::::::* cpe:2.3:o:apple:mac_os_x:10.2.8:::::::* cpe:2.3:o:apple:mac_os_x:10.2.7:::::::* cpe:2.3:o:apple:mac_os_x:10.2.6:::::::* cpe:2.3:o:apple:mac_os_x:10.2.5:::::::* cpe:2.3:o:apple:mac_os_x:10.2.4:::::::* cpe:2.3:o:apple:mac_os_x:10.2.3:::::::* cpe:2.3:o:apple:mac_os_x:10.2.2:::::::* cpe:2.3:o:apple:mac_os_x:10.2.1:::::::* cpe:2.3:o:apple:mac_os_x:10.2.0:::::::* cpe:2.3:o:apple:mac_os_x:10.2:::::::* cpe:2.3:o:apple:mac_os_x:10.1.5:::::::* cpe:2.3:o:apple:mac_os_x:10.1.4:::::::* cpe:2.3:o:apple:mac_os_x:10.1.3:::::::* cpe:2.3:o:apple:mac_os_x:10.1.2:::::::* cpe:2.3:o:apple:mac_os_x:10.1.1:::::::* cpe:2.3:o:apple:mac_os_x:10.1.0:::::::* cpe:2.3:o:apple:mac_os_x:10.1:::::::* cpe:2.3:o:apple:mac_os_x:10.0.4:::::::* cpe:2.3:o:apple:mac_os_x:10.0.3:::::::* cpe:2.3:o:apple:mac_os_x:10.0.2:::::::* cpe:2.3:o:apple:mac_os_x:10.0.1:::::::* cpe:2.3:o:apple:mac_os_x:10.0.0:::::::* cpe:2.3:o:apple:mac_os_x:10.0:::::::* cpe:2.3:o:apple:mac_os_x:::::::: cpe:2.3:o:apple:mac_os_x:-:::::::*	73
Os	Apple Tvos cpe:2.3:o:apple:tvos:3.0.2:::::::* cpe:2.3:o:apple:tvos:3.0.1:::::::* cpe:2.3:o:apple:tvos:3.0.0:::::::* cpe:2.3:o:apple:tvos:2.4.0:::::::* cpe:2.3:o:apple:tvos:2.3.1:::::::* cpe:2.3:o:apple:tvos:2.3.0:::::::* cpe:2.3:o:apple:tvos:2.2.0:::::::* cpe:2.3:o:apple:tvos:2.1.0:::::::* cpe:2.3:o:apple:tvos:2.0.2:::::::* cpe:2.3:o:apple:tvos:2.0.1:::::::* cpe:2.3:o:apple:tvos:2.0.0:::::::* cpe:2.3:o:apple:tvos:1.1.0:::::::* cpe:2.3:o:apple:tvos:1.0.0:::::::* cpe:2.3:o:apple:tvos::::::::	14
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:10.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:9.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:9.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:8.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::*	6

OpenVAS Exploits

Date	Description
2012-02-12	Name : Gentoo Security Advisory GLSA 201201-09 (FreeType) File : nvt/glsa_201201_09.nasl
2011-09-07	Name : Mac OS X v10.6.4 Multiple Vulnerabilities (2010-007) File : nvt/gb_macosx_su10-007.nasl
2011-08-09	Name : CentOS Update for freetype CESA-2010:0737 centos5 i386 File : nvt/gb_CESA-2010_0737_freetype_centos5_i386.nasl
2010-12-02	Name : Fedora Update for freetype FEDORA-2010-15878 File : nvt/gb_fedora_2010_15878_freetype_fc14.nasl
2010-11-23	Name : Fedora Update for freetype FEDORA-2010-17728 File : nvt/gb_fedora_2010_17728_freetype_fc13.nasl
2010-11-23	Name : Fedora Update for freetype FEDORA-2010-17755 File : nvt/gb_fedora_2010_17755_freetype_fc12.nasl
2010-11-16	Name : Ubuntu Update for freetype vulnerabilities USN-1013-1 File : nvt/gb_ubuntu_USN_1013_1.nasl
2010-11-16	Name : Fedora Update for freetype FEDORA-2010-15785 File : nvt/gb_fedora_2010_15785_freetype_fc12.nasl
2010-10-22	Name : Fedora Update for freetype FEDORA-2010-15705 File : nvt/gb_fedora_2010_15705_freetype_fc13.nasl
2010-10-19	Name : CentOS Update for freetype CESA-2010:0737 centos4 i386 File : nvt/gb_CESA-2010_0737_freetype_centos4_i386.nasl
2010-10-19	Name : Mandriva Update for freetype2 MDVSA-2010:201 (freetype2) File : nvt/gb_mandriva_MDVSA_2010_201.nasl
2010-10-19	Name : RedHat Update for freetype RHSA-2010:0737-01 File : nvt/gb_RHSA-2010_0737-01_freetype.nasl
2010-10-19	Name : RedHat Update for freetype RHSA-2010:0736-01 File : nvt/gb_RHSA-2010_0736-01_freetype.nasl
2010-10-19	Name : CentOS Update for freetype CESA-2010:0736 centos3 i386 File : nvt/gb_CESA-2010_0736_freetype_centos3_i386.nasl
2010-09-01	Name : FreeType Multiple denial of service vulnerabilities (Windows) File : nvt/secpod_freetype_mult_dos_vuln_win.nasl
2010-08-24	Name : Mandriva Update for freetype2 MDVSA-2010:156 (freetype2) File : nvt/gb_mandriva_MDVSA_2010_156.nasl
2010-08-24	Name : Mandriva Update for freetype2 MDVSA-2010:157 (freetype2) File : nvt/gb_mandriva_MDVSA_2010_157.nasl
2010-08-20	Name : Ubuntu Update for freetype vulnerabilities USN-972-1 File : nvt/gb_ubuntu_USN_972_1.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
70334	FreeType libXft base/ftstream.c CFF File Handling Overflow FreeType is prone to an overflow condition. 'base/ftstream.c' in libXft fails to properly sanitize user-supplied input resulting in an integer overflow. With a specially crafted CFF font file, a context-dependent attacker can potentially cause a further heap-based buffer overflow, allowing them to execute arbitrary code.
67305	FreeType base/ftobjs.c Mac_Read_POST_Resource Function Crafted LWFN Font Hand...
67303	FreeType type42/t42parse.c t42_parse_sfnts Function Array Index Error FontTyp...
67302	FreeType base/ftstream.c FT_Stream_EnterFrame Function Crafted Font File Posi...

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_libfreetype6-100812.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_freetype2-101013.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0737.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0736.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101004_freetype_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101110_freetype_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-01-24	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201201-09.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_freetype2-100927.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_freetype2-100812.nasl - Type : ACT_GATHER_INFO
2010-11-22	Name : The remote Fedora host is missing a security update. File : fedora_2010-17728.nasl - Type : ACT_GATHER_INFO
2010-11-22	Name : The remote Fedora host is missing a security update. File : fedora_2010-17755.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0864.nasl - Type : ACT_GATHER_INFO
2010-11-10	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_6_5.nasl - Type : ACT_GATHER_INFO
2010-11-10	Name : The remote host is missing a Mac OS X update that fixes security issues. File : macosx_SecUpd2010-007.nasl - Type : ACT_GATHER_INFO
2010-11-05	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1013-1.nasl - Type : ACT_GATHER_INFO
2010-11-02	Name : The remote Fedora host is missing a security update. File : fedora_2010-15785.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote Fedora host is missing a security update. File : fedora_2010-15705.nasl - Type : ACT_GATHER_INFO
2010-10-15	Name : The remote openSUSE host is missing a security update. File : suse_11_1_freetype2-101013.nasl - Type : ACT_GATHER_INFO
2010-10-15	Name : The remote openSUSE host is missing a security update. File : suse_11_2_freetype2-101013.nasl - Type : ACT_GATHER_INFO
2010-10-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-201.nasl - Type : ACT_GATHER_INFO
2010-10-14	Name : The remote Fedora host is missing a security update. File : fedora_2010-15878.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_freetype2-7121.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_freetype2-7168.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12656.nasl - Type : ACT_GATHER_INFO
2010-10-06	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0737.nasl - Type : ACT_GATHER_INFO
2010-10-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0736.nasl - Type : ACT_GATHER_INFO
2010-10-06	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0736.nasl - Type : ACT_GATHER_INFO
2010-10-06	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2116.nasl - Type : ACT_GATHER_INFO
2010-10-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0737.nasl - Type : ACT_GATHER_INFO
2010-09-09	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2105.nasl - Type : ACT_GATHER_INFO
2010-08-27	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12630.nasl - Type : ACT_GATHER_INFO
2010-08-26	Name : The remote openSUSE host is missing a security update. File : suse_11_1_freetype2-100812.nasl - Type : ACT_GATHER_INFO
2010-08-26	Name : The remote openSUSE host is missing a security update. File : suse_11_2_freetype2-100812.nasl - Type : ACT_GATHER_INFO
2010-08-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-157.nasl - Type : ACT_GATHER_INFO
2010-08-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-156.nasl - Type : ACT_GATHER_INFO
2010-08-18	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-972-1.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:54:02	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	4
Oval ID(s)	6
CPE ID(s)	230
osvdb(s)	4
Openvas Exploit(s)	18
Nessus® Exploit(s)	36

	Related
9.3	CVE-2010-3311
6.8	CVE-2010-2808
6.8	CVE-2010-2806
6.8	CVE-2010-2805
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 4 more Alert(s)