CVE-2011-0226

Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.
References
Link Resource
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html Vendor Advisory
http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html Vendor Advisory
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html
http://secunia.com/advisories/45167 Vendor Advisory
http://secunia.com/advisories/45224 Vendor Advisory
http://support.apple.com/kb/HT4802 Vendor Advisory
http://support.apple.com/kb/HT4803 Vendor Advisory
http://support.apple.com/kb/HT5002
http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html
http://www.debian.org/security/2011/dsa-2294
http://www.mandriva.com/security/advisories?name=MDVSA-2011:120
http://www.redhat.com/support/errata/RHSA-2011-1085.html
http://www.securityfocus.com/bid/48619
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html Vendor Advisory
http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html Vendor Advisory
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html
http://secunia.com/advisories/45167 Vendor Advisory
http://secunia.com/advisories/45224 Vendor Advisory
http://support.apple.com/kb/HT4802 Vendor Advisory
http://support.apple.com/kb/HT4803 Vendor Advisory
http://support.apple.com/kb/HT5002
http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html
http://www.debian.org/security/2011/dsa-2294
http://www.mandriva.com/security/advisories?name=MDVSA-2011:120
http://www.redhat.com/support/errata/RHSA-2011-1085.html
http://www.securityfocus.com/bid/48619
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.2.10:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*

History

21 Nov 2024, 01:23

Type Values Removed Values Added
References () http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - () http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html -
References () http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html - Vendor Advisory () http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html - Vendor Advisory
References () http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html - Vendor Advisory () http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html - Vendor Advisory
References () http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html - () http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html -
References () http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html - () http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html -
References () http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html - () http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html -
References () http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html - () http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html -
References () http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html - () http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html -
References () http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html - () http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html -
References () http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html - () http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html -
References () http://secunia.com/advisories/45167 - Vendor Advisory () http://secunia.com/advisories/45167 - Vendor Advisory
References () http://secunia.com/advisories/45224 - Vendor Advisory () http://secunia.com/advisories/45224 - Vendor Advisory
References () http://support.apple.com/kb/HT4802 - Vendor Advisory () http://support.apple.com/kb/HT4802 - Vendor Advisory
References () http://support.apple.com/kb/HT4803 - Vendor Advisory () http://support.apple.com/kb/HT4803 - Vendor Advisory
References () http://support.apple.com/kb/HT5002 - () http://support.apple.com/kb/HT5002 -
References () http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html - () http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html -
References () http://www.debian.org/security/2011/dsa-2294 - () http://www.debian.org/security/2011/dsa-2294 -
References () http://www.mandriva.com/security/advisories?name=MDVSA-2011:120 - () http://www.mandriva.com/security/advisories?name=MDVSA-2011:120 -
References () http://www.redhat.com/support/errata/RHSA-2011-1085.html - () http://www.redhat.com/support/errata/RHSA-2011-1085.html -
References () http://www.securityfocus.com/bid/48619 - () http://www.securityfocus.com/bid/48619 -

Information

Published : 2011-07-19 22:55

Updated : 2024-11-21 01:23


NVD link : CVE-2011-0226

Mitre link : CVE-2011-0226

CVE.ORG link : CVE-2011-0226


JSON object : View

Products Affected

freetype

  • freetype

apple

  • iphone_os
CWE
CWE-189

Numeric Errors