NetSight
IP …
medium6.8

CVE-2010-2808

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory c…

Impact

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font.

Affected products

VendorProductAffected versions
FreetypeFreetype
before 2.4.2
AppleIphone Os
before 4.2
AppleMac Os X
before 10.6.5
AppleTvos
before 4.1.0
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.04, 9.10, 10.04

Weakness classification

CWE-120

References