CVE-2010-2541: Buffer Overflow
Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
Other sources
While fixing CVE-2010-2527 Marek Kašík discovered an additional buffer overflow in the ftmulti demo program.
The demo application could crash or, possibly, lead to the execution of arbitrary code if an attacker were able to get a victim to load a malicious font file.
This is CVE-2010-2541
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2010-2541?
CVE-2010-2541 has a severity level that may lead to denial of service or remote code execution.
How do I fix CVE-2010-2541?
To fix CVE-2010-2541, upgrade the FreeType package to version 2.4.2 or later.
Which versions of FreeType are affected by CVE-2010-2541?
FreeType versions prior to 2.4.2 are affected by CVE-2010-2541.
What type of attack does CVE-2010-2541 enable?
CVE-2010-2541 enables remote attackers to execute arbitrary code or cause application crashes.
Is CVE-2010-2541 specific to certain operating systems?
Yes, CVE-2010-2541 affects various distributions including Red Hat and Ubuntu.