NetSight
IP …
critical9.3

CVE-2011-0226

Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other produ…

Impact

Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.

Affected products

VendorProductAffected versions
FreetypeFreetype
through 2.4.5
Versions 2.2.1, 2.2.10, 2.3.0, 2.3.1, 2.3.2
AppleIphone Os
through 4.2.8
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1

Weakness classification

CWE-189

References