NetSight
IP …
medium5.1

CVE-2010-2520

Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote at…

Impact

Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

Affected products

VendorProductAffected versions
FreetypeFreetype
before 2.4.0
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.04, 9.10, 10.04
AppleMac Os X
before 10.6.5
DebianDebian Linux
Version 5.0

Weakness classification

CWE-787

References