NetSight
IP …
medium6.8

CVE-2010-2806

Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (applicati…

Impact

Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based buffer overflow.

Affected products

VendorProductAffected versions
FreetypeFreetype
before 2.4.2
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.04, 9.10, 10.04
AppleIphone Os
before 4.2
AppleMac Os X
before 10.6.5
AppleTvos
before 4.1.0

Weakness classification

CWE-129

References