4.3 - DSA-2328

Executive Summary

Summary
Title	freetype security update

Informations
Name	DSA-2328	First vendor Publication	2011-10-24
Vendor	Debian	Last vendor Modification	2011-10-24
Severity (Vendor)	N/A	Revision	1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Cvss Base Score	4.3	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

It was discovered that missing input sanitising in Freetype's glyph handling could lead to memory corruption, resulting in denial of service or the execution of arbitrary code.

For the oldstable distribution (lenny), this problem has been fixed in version 2.3.7-2+lenny7.

For the stable distribution (squeeze), this problem has been fixed in version 2.4.2-2.1+squeeze2.

For the unstable distribution (sid), this problem has been fixed in version 2.4.7-1.

We recommend that you upgrade your freetype packages.

Original Source

Url : http://www.debian.org/security/2011/dsa-2328

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-94	Failure to Control Generation of Code ('Code Injection')

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:15179

Oval ID:	oval:org.mitre.oval:def:15179
Title:	DSA-2328-1 freetype -- missing input sanitising
Description:	It was discovered that missing input sanitising in Freetype's glyph handling could lead to memory corruption, resulting in denial of service or the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-2328-1 CVE-2011-3256	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	freetype
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND freetype DPKG is earlier than 2.3.7-2+lenny7 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND freetype DPKG is earlier than 2.4.2-2.1+squeeze2

Definition Id: oval:org.mitre.oval:def:21950

Oval ID:	oval:org.mitre.oval:def:21950
Title:	RHSA-2011:1402: freetype security update (Important)
Description:	FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1402-01 CESA-2011:1402 CVE-2011-3256	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	freetype
Definition Synopsis:
Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section freetype-demos is earlier than 0:2.2.1-28.el5_7.1 AND freetype is earlier than 0:2.2.1-28.el5_7.1 AND freetype-devel is earlier than 0:2.2.1-28.el5_7.1 AND Operation system section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section freetype-demos is earlier than 0:2.3.11-6.el6_1.7 AND freetype is earlier than 0:2.3.11-6.el6_1.7 AND freetype-devel is earlier than 0:2.3.11-6.el6_1.7

Definition Id: oval:org.mitre.oval:def:23196

Oval ID:	oval:org.mitre.oval:def:23196
Title:	DEPRECATED: ELSA-2011:1402: freetype security update (Important)
Description:	FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1402-01 CVE-2011-3256	Version:	7
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	freetype
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test freetype-demos is earlier than 0:2.2.1-28.el5_7.1 AND freetype is earlier than 0:2.2.1-28.el5_7.1 AND freetype-devel is earlier than 0:2.2.1-28.el5_7.1 OR rpm test Oracle Linux 6.x AND rpm test freetype-demos is earlier than 0:2.3.11-6.el6_1.7 AND freetype is earlier than 0:2.3.11-6.el6_1.7 AND freetype-devel is earlier than 0:2.3.11-6.el6_1.7

Definition Id: oval:org.mitre.oval:def:23365

Oval ID:	oval:org.mitre.oval:def:23365
Title:	ELSA-2011:1402: freetype security update (Important)
Description:	FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1402-01 CVE-2011-3256	Version:	6
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	freetype
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test freetype-demos is earlier than 0:2.2.1-28.el5_7.1 AND freetype is earlier than 0:2.2.1-28.el5_7.1 AND freetype-devel is earlier than 0:2.2.1-28.el5_7.1 OR rpm test Oracle Linux 6.x AND rpm test freetype-demos is earlier than 0:2.3.11-6.el6_1.7 AND freetype is earlier than 0:2.3.11-6.el6_1.7 AND freetype-devel is earlier than 0:2.3.11-6.el6_1.7

CPE : Common Platform Enumeration

Type	Description	Count
Os	Apple Iphone Os cpe:2.3:o:apple:iphone_os:4.3.5:-:ipad:::::* cpe:2.3:o:apple:iphone_os:4.3.5:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:4.3.5:::::::* cpe:2.3:o:apple:iphone_os:4.3.3:::::::* cpe:2.3:o:apple:iphone_os:4.3.2:::::::* cpe:2.3:o:apple:iphone_os:4.3.1:::::::* cpe:2.3:o:apple:iphone_os:4.3.0:::::::* cpe:2.3:o:apple:iphone_os:4.2.8:::::::* cpe:2.3:o:apple:iphone_os:4.2.5:::::::* cpe:2.3:o:apple:iphone_os:4.2.1:::::::* cpe:2.3:o:apple:iphone_os:4.1:::::::* cpe:2.3:o:apple:iphone_os:4.0.2:::::::* cpe:2.3:o:apple:iphone_os:4.0.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:4.0.1:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:4.0.1:::::::* cpe:2.3:o:apple:iphone_os:4.0:-:iphone:::::* cpe:2.3:o:apple:iphone_os:4.0:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:4.0:::::::* cpe:2.3:o:apple:iphone_os:3.2.2:::::::* cpe:2.3:o:apple:iphone_os:3.2.1:-:ipad:::::* cpe:2.3:o:apple:iphone_os:3.2.1:::::::* cpe:2.3:o:apple:iphone_os:3.2:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:3.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:3.1.3:-:iphone:::::* cpe:2.3:o:apple:iphone_os:3.1.2:-:iphone:::::* cpe:2.3:o:apple:iphone_os:3.1:::::::* cpe:2.3:o:apple:iphone_os:3.1:-:ipodtouch:::::* cpe:2.3:o:apple:iphone_os:3.1:-:iphone:::::* cpe:2.3:o:apple:iphone_os:3.0:-:iphone:::::*	29

OpenVAS Exploits

Date	Description
2012-08-02	Name : SuSE Update for freetype2 openSUSE-SU-2012:0047-1 (freetype2) File : nvt/gb_suse_2012_0047_1.nasl
2012-08-02	Name : SuSE Update for freetype2 openSUSE-SU-2012:0015-1 (freetype2) File : nvt/gb_suse_2012_0015_1.nasl
2012-07-30	Name : CentOS Update for freetype CESA-2011:1402 centos4 x86_64 File : nvt/gb_CESA-2011_1402_freetype_centos4_x86_64.nasl
2012-07-30	Name : CentOS Update for freetype CESA-2011:1402 centos5 x86_64 File : nvt/gb_CESA-2011_1402_freetype_centos5_x86_64.nasl
2012-04-26	Name : Fedora Update for freetype FEDORA-2012-5422 File : nvt/gb_fedora_2012_5422_freetype_fc15.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201201-09 (FreeType) File : nvt/glsa_201201_09.nasl
2012-02-11	Name : Debian Security Advisory DSA 2328-1 (freetype) File : nvt/deb_2328_1.nasl
2012-02-06	Name : Mac OS X Multiple Vulnerabilities (2012-001) File : nvt/gb_macosx_su12-001.nasl
2011-12-05	Name : Fedora Update for freetype FEDORA-2011-15964 File : nvt/gb_fedora_2011_15964_freetype_fc15.nasl
2011-12-02	Name : Fedora Update for freetype FEDORA-2011-15956 File : nvt/gb_fedora_2011_15956_freetype_fc14.nasl
2011-11-21	Name : Ubuntu Update for freetype USN-1267-1 File : nvt/gb_ubuntu_USN_1267_1.nasl
2011-11-11	Name : Fedora Update for freetype FEDORA-2011-14749 File : nvt/gb_fedora_2011_14749_freetype_fc15.nasl
2011-11-11	Name : CentOS Update for freetype CESA-2011:1402 centos4 i386 File : nvt/gb_CESA-2011_1402_freetype_centos4_i386.nasl
2011-10-31	Name : RedHat Update for freetype RHSA-2011:1402-01 File : nvt/gb_RHSA-2011_1402-01_freetype.nasl
2011-10-31	Name : Mandriva Update for freetype2 MDVSA-2011:157 (freetype2) File : nvt/gb_mandriva_MDVSA_2011_157.nasl
2011-10-31	Name : CentOS Update for freetype CESA-2011:1402 centos5 i386 File : nvt/gb_CESA-2011_1402_freetype_centos5_i386.nasl
0000-00-00	Name : FreeBSD Ports: freetype2 File : nvt/freebsd_freetype24.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
76324	Apple iOS CoreGraphics Multiple freetype Font Handling Memory Corruption

Nessus® Vulnerability Scanner

Date	Description
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_libfxt_20141107.nasl - Type : ACT_GATHER_INFO
2014-10-12	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-8.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_freetype2-111216.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_freetype2-111216.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-08.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1402.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0094.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111025_freetype_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-02-02	Name : The remote host is missing a Mac OS X update that fixes several security vuln... File : macosx_10_7_3.nasl - Type : ACT_GATHER_INFO
2012-01-24	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201201-09.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_freetype2-111201.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_freetype2-7872.nasl - Type : ACT_GATHER_INFO
2011-11-29	Name : The remote Fedora host is missing a security update. File : fedora_2011-15956.nasl - Type : ACT_GATHER_INFO
2011-11-18	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1267-1.nasl - Type : ACT_GATHER_INFO
2011-11-14	Name : The remote Fedora host is missing a security update. File : fedora_2011-14749.nasl - Type : ACT_GATHER_INFO
2011-11-02	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_54075e3904ac11e1a94ebcaec565249c.nasl - Type : ACT_GATHER_INFO
2011-10-27	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1402.nasl - Type : ACT_GATHER_INFO
2011-10-26	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1402.nasl - Type : ACT_GATHER_INFO
2011-10-25	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2328.nasl - Type : ACT_GATHER_INFO
2011-10-24	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-157.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:30:30	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	4
CPE ID(s)	29
osvdb(s)	1
Openvas Exploit(s)	17
Nessus® Exploit(s)	20

	Related
4.3	CVE-2011-3256
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 1 more Alert(s)

4.3 - DSA-2328

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU