NetSight
IP …
high7.5

CVE-2009-0946

Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs…

Impact

Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.

Affected products

VendorProductAffected versions
FreetypeFreetype
through 2.3.9
DebianDebian Linux
Versions 4.0, 5.0, 6.0
CanonicalUbuntu Linux
Versions 6.06, 8.04, 8.10, 9.04
OpensuseOpensuse
Versions 10.3, 11.0, 11.1
SuseLinux Enterprise Server
Versions 10, 11
AppleSafari
Version 4.0
AppleIphone Os
from 1.0.0 through 2.2.1
AppleMac Os X
from 10.6.0 through 10.6.4
Versions 10.4.11, 10.5.8
AppleMac Os X Server
from 10.6.0 through 10.6.4
Versions 10.4.11, 10.5.8

Weakness classification

CWE-190

References