CVE-2010-3053

bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) via a crafted BDF font file, related to an attempted modification of a value in a static string.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.2.10:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:17

Type Values Removed Values Added
References () http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - () http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html -
References () http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html - () http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html -
References () http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - () http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html -
References () http://secunia.com/advisories/42314 - () http://secunia.com/advisories/42314 -
References () http://secunia.com/advisories/42317 - () http://secunia.com/advisories/42317 -
References () http://secunia.com/advisories/48951 - () http://secunia.com/advisories/48951 -
References () http://support.apple.com/kb/HT4435 - () http://support.apple.com/kb/HT4435 -
References () http://support.apple.com/kb/HT4456 - () http://support.apple.com/kb/HT4456 -
References () http://support.apple.com/kb/HT4457 - () http://support.apple.com/kb/HT4457 -
References () http://www.vupen.com/english/advisories/2010/3045 - () http://www.vupen.com/english/advisories/2010/3045 -
References () http://www.vupen.com/english/advisories/2010/3046 - () http://www.vupen.com/english/advisories/2010/3046 -
References () https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019 - () https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019 -

Information

Published : 2010-08-19 18:00

Updated : 2024-11-21 01:17


NVD link : CVE-2010-3053

Mitre link : CVE-2010-3053

CVE.ORG link : CVE-2010-3053


JSON object : View

Products Affected

freetype

  • freetype
CWE
CWE-20

Improper Input Validation