CVE-2011-3256: Code Injection
FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3256?
CVE-2011-3256 has a critical severity level due to its potential to allow remote code execution and cause denial of service.
How do I fix CVE-2011-3256?
To fix CVE-2011-3256, update FreeType to version 2.4.7 or later on affected systems.
Which software versions are affected by CVE-2011-3256?
CVE-2011-3256 affects multiple versions of iPhone OS, including 3.0 and 4.3.5, among others.
What type of attacks can CVE-2011-3256 facilitate?
CVE-2011-3256 can facilitate remote code execution and denial of service attacks through crafted fonts.
Is CVE-2011-3256 still a relevant threat today?
While CVE-2011-3256 was identified years ago, its relevance may persist if affected systems remain unpatched and in use.