CVE-2010-2497: Integer Underflow
Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
Other sources
Robert Swiecki reported an integer overflow flaw in freetype with how it handles glyphs. This could cause applications linked against freetype to crash or, possibly, lead to the execution of arbitrary code if an attacker were able to get a victim to load a malicious font file.
The affected code is not present in Red Hat Enterprise Linux 5 (freetype 2.2.1).
This issue has been given the name CVE-2010-2497.
Upstream bug reports:
http://savannah.nongnu.org/bugs/index.php?30082 http://savannah.nongnu.org/bugs/index.php?30083
Upstream commit that fixes the issue:
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7d3d2cc4fef72c6be9c454b3809c387e12b44cfc
Statement:
Not vulnerable. This issue did not affect the versions of freetype as shipped with Red Hat Enterprise Linux 3, 4, or 5.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2497?
CVE-2010-2497 has a severity level that can lead to a denial of service or potential arbitrary code execution.
How do I fix CVE-2010-2497?
To fix CVE-2010-2497, update FreeType to version 2.4.0 or later.
What are the potential impacts of CVE-2010-2497?
The potential impacts of CVE-2010-2497 include application crashes and possible remote code execution.
Which software is affected by CVE-2010-2497?
CVE-2010-2497 affects FreeType versions before 2.4.0, macOS versions prior to 10.6.5, and Debian GNU/Linux 5.0.
Who reported CVE-2010-2497?
CVE-2010-2497 was reported by Robert Swiecki.