CVE-2010-3054

Published: 19 August 2010

Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.

Priority

Status

Package	Release	Status
freetype Launchpad, Ubuntu, Debian	dapper	Not vulnerable (doesn't reproduce)
	hardy	Not vulnerable (doesn't reproduce)
	jaunty	Released (2.3.9-4ubuntu0.3)
	karmic	Released (2.3.9-5ubuntu0.2)
	lucid	Not vulnerable (2.3.11-1ubuntu2.2)
	upstream	Released (2.4.2)

References

https://www.cve.org/CVERecord?id=CVE-2010-3054
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.