NetSight
IP …
medium6.8

CVE-2010-3814

Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a den…

Impact

Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document with a crafted embedded font.

Affected products

VendorProductAffected versions
FreetypeFreetype
through 2.4.3
Versions 1.3.1, 2.0.6, 2.0.9, 2.1, 2.1.3

Weakness classification

CWE-119

References