REDHAT-BUG-613167: Integer Overflow
First published: Fri Jul 09 2010(Updated: )
Robert Swiecki reported an integer overflow flaw in freetype with how it processes certain fonts. This could cause applications linked against freetype to crash or, possibly, lead to the execution of arbitrary code if an attacker were able to get a victim to load a malicious font file. The code in question goes back to the version of freetype in Red Hat Enterprise Linux 3, and can only be triggered when MALLOC_CHECK_=3 is set. This issue has been given the name <a href="https://access.redhat.com/security/cve/CVE-2010-2500">CVE-2010-2500</a>. Upstream bug reports: <a href="http://savannah.nongnu.org/bugs/index.php?30263">http://savannah.nongnu.org/bugs/index.php?30263</a> Upstream commit that fixes the issue: <a href="http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=6305b869d86ff415a33576df6d43729673c66eee">http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=6305b869d86ff415a33576df6d43729673c66eee</a> Acknowledgements: Red Hat would like to thank Robert Święcki of the Google Security Team for the discovery of this issue.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| FreeType | >=0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2010-2500
- http://savannah.nongnu.org/bugs/index.php?30263
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=6305b869d86ff415a33576df6d43729673c66eee
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=613299
- http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html
- https://rhn.redhat.com/errata/RHSA-2010-0577.html
- https://rhn.redhat.com/errata/RHSA-2010-0578.html
- https://bugzilla.redhat.com/show_bug.cgi?id=613167
Frequently Asked Questions
What is the severity of REDHAT-BUG-613167?
The severity of REDHAT-BUG-613167 is considered critical due to the potential for application crashes and arbitrary code execution.
How do I fix REDHAT-BUG-613167?
To fix REDHAT-BUG-613167, update the freetype package to the latest available version provided by Red Hat.
What could happen if I don't address REDHAT-BUG-613167?
If REDHAT-BUG-613167 is not addressed, it may allow attackers to execute arbitrary code on the affected system.
Which systems are affected by REDHAT-BUG-613167?
REDHAT-BUG-613167 affects systems that use the freetype library, especially if they process malicious font files.
Who reported REDHAT-BUG-613167?
REDHAT-BUG-613167 was reported by security researcher Robert Swiecki.
- agent/type
- agent/references
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-2500
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/freetype