NetSight
IP …
medium6.8

CVE-2010-3855

Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of servic…

Impact

Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font.

Affected products

VendorProductAffected versions
FreetypeFreetype
through 2.4.3
Versions 1.3.1, 2.0.6, 2.0.9, 2.1, 2.1.3

Weakness classification

CWE-119

References