CVE-2010-3855
Published: 22 October 2010
Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
freetype Launchpad, Ubuntu, Debian |
dapper |
Released
(2.1.10-1ubuntu2.10)
|
| hardy |
Released
(2.3.5-1ubuntu4.8.04.6)
|
|
| jaunty |
Ignored
(end of life)
|
|
| karmic |
Released
(2.3.9-5ubuntu0.4)
|
|
| lucid |
Released
(2.3.11-1ubuntu2.4)
|
|
| maverick |
Released
(2.4.2-2ubuntu0.1)
|
|
| upstream |
Needs triage
|
|
|
Patches: upstream: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=59eb9f8cfe7d1df379a2318316d1f04f80fba54a upstream: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=16bd51c81929354a88a0ea0df04e08e5d8bffd04 upstream: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b3e6df69e6d112af739f3ad08cb7cafce32683b2 |
||