CVE-2010-3814: Buffer Overflow
Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document with a crafted embedded font.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3814?
CVE-2010-3814 has a severity rating that indicates it can lead to arbitrary code execution or denial of service.
How do I fix CVE-2010-3814?
To fix CVE-2010-3814, update FreeType to version 2.4.4 or later which addresses the vulnerability.
What software is affected by CVE-2010-3814?
CVE-2010-3814 affects various versions of FreeType 2.4.3 and earlier, as well as certain versions of FreeType 1.3.1 and 2.x.
What type of vulnerability is CVE-2010-3814?
CVE-2010-3814 is categorized as a heap-based buffer overflow vulnerability.
Can CVE-2010-3814 be exploited remotely?
Yes, CVE-2010-3814 can be exploited remotely through the use of crafted SHZ bytecode instructions.