REDHAT-BUG-623625: Buffer Overflow
First published: Thu Aug 12 2010(Updated: )
Marc Schoenefeld found an input stream position error in the way FreeType font rendering engine processed input file streams. If a user loaded a specially-crafted font file with an application linked against FreeType and relevant font glyphs were subsequently rendered with the X FreeType library (libXft), it could cause the application to crash or, possibly execute arbitrary code (integer overflow leading to heap-based buffer overflow in the libXft library) with the privileges of the user running the application. Different vulnerability than <a href="https://access.redhat.com/security/cve/CVE-2010-1797">CVE-2010-1797</a>. Affected versions: freetype-2.3 and before that. Latest upstream version (2.4) is not affected
| Affected Software | Affected Version | How to fix |
|---|---|---|
| FreeType | <2.3 | |
| X.org libXft | <2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2010-1797
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=638522
- https://rhn.redhat.com/errata/RHSA-2010-0736.html
- https://rhn.redhat.com/errata/RHSA-2010-0737.html
- https://rhn.redhat.com/errata/RHSA-2010-0864.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=623625#c0
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=623625#c38
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=623625#c39
- https://bugzilla.redhat.com/show_bug.cgi?id=623625
- agent/last-modified-date
- agent/type
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-3311
- agent/references
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/freetype
- canonical/freetype
- vendor/x.org
- canonical/x.org libxft