CVE-2010-2499
CVE-2010-2499
Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=c69891a1345640096fbf396e8dd567fe879ce233http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f29f741efbba0a5ce2f16464f648fb8d026ed4c8http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlhttp://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.htmlhttp://marc.info/?l=oss-security&m=127905701201340&w=2http://marc.info/?l=oss-security&m=127909326909362&w=2https://bugzilla.redhat.com/show_bug.cgi?id=613162http://secunia.com/advisories/48951http://securitytracker.com/id?1024266https://savannah.nongnu.org/bugs/?30248https://savannah.nongnu.org/bugs/?30249http://support.apple.com/kb/HT4435