{"resultsPerPage":112,"startIndex":0,"totalResults":112,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-24T03:48:01.392","vulnerabilities":[{"cve":{"id":"CVE-2006-0747","sourceIdentifier":"secalert@redhat.com","published":"2006-05-23T10:06:00.000","lastModified":"2026-06-16T22:21:12.193","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"6351F282-0A46-4A6D-9793-D338845EFF2F"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/20525","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20591","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20638","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20791","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21062","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21135","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21385","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21701","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23939","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016522","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2006/dsa-1095","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:099","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0500.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/436836/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/18326","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2007/0381","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183676","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://issues.rpath.com/browse/RPL-429","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9508","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/291-1/","source":"secalert@redhat.com"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0500.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/436836/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/18326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2007/0381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://issues.rpath.com/browse/RPL-429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/291-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-1861","sourceIdentifier":"secalert@redhat.com","published":"2006-05-23T10:06:00.000","lastModified":"2026-06-16T22:23:49.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c.  NOTE: item 4 was originally identified by CVE-2006-2493."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/20100","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20525","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20591","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20638","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20791","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21000","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21062","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21135","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21385","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21701","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23939","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27162","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27167","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27271","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35200","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35204","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35233","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200607-02.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1016522","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=416463","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3438","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2006/dsa-1095","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200710-09.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:099","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0500.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0329.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1062.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/436836/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/18034","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2006/1868","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0381","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=128606","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593#c8","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502565","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26553","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-429","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9124","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/291-1/","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html","source":"secalert@redhat.com"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/35233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200607-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1016522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=416463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200710-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0500.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0329.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1062.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/436836/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/18034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2006/1868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=128606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593#c8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/291-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-2661","sourceIdentifier":"cve@mitre.org","published":"2006-05-30T19:02:00.000","lastModified":"2026-06-16T22:25:29.087","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2","matchCriteriaId":"F39B31DE-357E-49E1-A404-62D1747EBBE5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A2E0C1F8-31F5-4F61-9DF7-E49B43D3C873"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:5.04:*:*:*:*:*:*:*","matchCriteriaId":"42E47538-08EE-4DC1-AC17-883C44CF77BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*","matchCriteriaId":"0FA3A32E-445A-4D39-A8D5-75F5370AD23D"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*","matchCriteriaId":"5C18C3CD-969B-4AA3-AE3A-BA4A188F8BFF"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/20525","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/20591","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/20638","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/20791","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/21062","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/21135","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/21385","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/21701","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23939","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1016520","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1095","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:099","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0500.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/436836/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/18329","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2007/0381","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183676","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-429","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11692","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/291-1/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/20525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/20591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/20638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/20791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/21062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/21135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/21385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/21701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/23939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1016520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:099","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0500.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/436836/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/18329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2007/0381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/291-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2006-3376","sourceIdentifier":"cve@mitre.org","published":"2006-07-06T20:05:00.000","lastModified":"2026-06-16T22:26:56.557","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file."},{"lang":"es","value":"Desbordamiento de entero en el archivo player.c en libwmf 0.2.8.4, utilizado en múltiples productos incluyendo (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, y(6) imagemagick, que permite a los atacantes remotos ejecutar arbitrariamente código a través del campo cabecera MaxRecordSize en un archivo WMF."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wvware:libwmf:0.2.8_.4:*:*:*:*:*:*:*","matchCriteriaId":"4C647E35-83D2-4D21-AA48-B963B9D6A123"},{"vulnerable":true,"criteria":"cpe:2.3:a:wvware:wv2:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"565FB525-8593-4148-8A01-EF99F745AB4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wvware:wv2:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B0AB2FAA-427C-4313-B7AF-31829E58C367"},{"vulnerable":true,"criteria":"cpe:2.3:a:wvware:wv2:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"98E88259-7829-4179-962D-64F98174F6C5"}]}]}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2006-0597.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20921","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21064","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21261","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21419","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21459","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21473","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22311","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200608-17.xml","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/1190","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1016518","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:132","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2006_19_sr.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/438803/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/18751","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-333-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/2646","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27516","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10262","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2006/dsa-1194","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0597.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200608-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/1190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1016518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2006_19_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/438803/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/18751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-333-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/2646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2006/dsa-1194","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2006-3467","sourceIdentifier":"secalert@redhat.com","published":"2006-07-21T14:03:00.000","lastModified":"2026-06-16T22:27:07.790","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861."},{"lang":"es","value":"Desbordamiento de entero en FreeType en versiones anteriores a 2.2 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de un archivo PCF manipulado, según lo demostrado mediante el archivo de prueba Red Hat bad1.pcf, debido a una solución parcial de CVE-2006-1861."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"6351F282-0A46-4A6D-9793-D338845EFF2F"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U","source":"secalert@redhat.com"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-Aug/0002.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/21062","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/21135","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21144","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21232","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21285","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21566","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21567","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21606","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21626","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21701","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21793","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21798","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21836","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22027","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22332","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22875","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22907","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23400","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23939","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27271","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200609-04.xml","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1016522","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3438","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-186.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-284.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2006/dsa-1178","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2006/dsa-1193","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:129","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:148","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0500.html","source":"secalert@redhat.com","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0634.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0635.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/444318/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/451404/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/451417/100/200/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/451419/100/200/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/451426/100/200/threaded","source":"secalert@redhat.com"},{"url":"http://www.trustix.org/errata/2006/0052/","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-324-1","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-341-1","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/download/esx/esx-202-200610-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/download/esx/esx-213-200610-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/download/esx/esx-254-200610-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4502","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4522","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/0381","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10673","source":"secalert@redhat.com"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-Aug/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/21836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/23939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/27271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200609-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1016522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-186.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-284.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1178","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0500.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0634.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0635.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/444318/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/451404/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/451417/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/451419/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/451426/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.org/errata/2006/0052/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-324-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-341-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/download/esx/esx-202-200610-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/download/esx/esx-213-200610-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/download/esx/esx-254-200610-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4522","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/0381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10673","source":"af854a3a-2127-422b-91ae-364da2661108"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00"}]}},{"cve":{"id":"CVE-2007-1351","sourceIdentifier":"secalert@redhat.com","published":"2007-04-06T01:19:00.000","lastModified":"2026-06-16T22:37:24.030","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow."},{"lang":"es","value":"Desbordamiento de enteros en la función bdfReadCharacters en (1) X.Org libXfont before 20070403 y (2) freetype 2.3.2 y permite a usuarios remotos validados ejecutar código de su elección a través de fuentes manipuladas BDF, las cueles dan como resultado un desbordamiento de pila."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","baseScore":8.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:amd64:*:*:*:*:*","matchCriteriaId":"86FD134D-A5C5-4B08-962D-70CF07C74923"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:i386:*:*:*:*:*","matchCriteriaId":"FA84692E-F99D-4207-B4F2-799A6ADB88AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:powerpc:*:*:*:*:*","matchCriteriaId":"8B0F1091-4B76-44F5-B896-6D37E2F909A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:sparc:*:*:*:*:*","matchCriteriaId":"EF15862D-6108-4791-8817-622123C8D10C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:amd64:*:*:*:*:*","matchCriteriaId":"F1672825-AB87-4402-A628-B33AE5B7D4C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:i386:*:*:*:*:*","matchCriteriaId":"939216D8-9E6C-419E-BC0A-EC7F0F29CE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:powerpc:*:*:*:*:*","matchCriteriaId":"E520564E-964D-4758-945B-5EF0C35E605C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:sparc:*:*:*:*:*","matchCriteriaId":"2294D5A7-7B36-497A-B0F1-514BC49E1423"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:amd64:*:*:*:*:*","matchCriteriaId":"AB80939E-8B58-48B6-AFB7-9CF518C0EE1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:i386:*:*:*:*:*","matchCriteriaId":"80FF1759-5F86-4046-ABA3-EB7B0038F656"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:powerpc:*:*:*:*:*","matchCriteriaId":"DF578B64-57E2-4FCD-A6E1-F8F3317FDB88"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:sparc:*:*:*:*:*","matchCriteriaId":"61B11116-FA94-4989-89A1-C7B551D5195A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:libxfont:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"AFADBA5A-8168-40B8-B5CA-0F1F7F9193D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"837EBF15-6C7D-46B8-8A90-9DFBF2C09FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E859A205-0DC2-4E28-8FF0-72D66DE9B280"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F18E8C7B-53AC-4BC7-9E00-A70293172B58"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:rpath:rpath_linux:1:*:*:*:*:*:*:*","matchCriteriaId":"0DD12BC0-1E50-49C6-AD0D-8CE90F0E8449"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"F9440B25-D206-4914-9557-B5F030890DEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E9933557-3BCA-4D92-AD4F-27758A0D3347"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"10A60552-15A5-4E95-B3CE-99A4B26260C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:desktop:*:*:*:*:*","matchCriteriaId":"FE524195-06F1-4504-9223-07596588CC70"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:desktop_workstation:*:*:*:*:*","matchCriteriaId":"2FEED00F-3B70-4E57-AD80-7903AECED14B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:5.0:*:server:*:*:*:*:*","matchCriteriaId":"40D71CBC-D365-4710-BAB5-8A1159F35E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D74A418-50F0-42C0-ABBC-BBBE718FF025"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*","matchCriteriaId":"84A50ED3-FD0D-4038-B3E7-CC65D166C968"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*","matchCriteriaId":"8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:*","matchCriteriaId":"F5BB6C5D-4C43-4BB8-B1CE-A70BBE650CA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CC77812C-D84E-493E-9D21-1BA6C2129E70"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:*","matchCriteriaId":"02362C25-B373-4FB1-AF4A-2AFC7F7D4387"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:x86_64:*:*:*:*:*","matchCriteriaId":"19AD5F8D-6EB9-4E4B-9E82-FFBAB68797E9"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2BB0B27C-04EA-426F-9016-7406BACD91DF"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"BB2B1BA5-8370-4281-B5C9-3D4FE6C70FBC"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"94F65351-C2DA-41C0-A3F9-1AE951E4386E"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"1B795F9F-AFB3-4A2A-ABC6-9246906800DE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:2.0:*:*:*:*:*:*:*","matchCriteriaId":"77FF1412-A7DA-4669-8AE1-5A529AB387FB"}]}]}],"references":[{"url":"http://issues.foresightlinux.org/browse/FL-223","source":"secalert@redhat.com"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2007-0125.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24741","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/24745","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24756","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24765","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24768","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24770","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/24771","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24772","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24776","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24791","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24885","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24889","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24921","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/24996","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25004","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25006","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25096","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25195","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25216","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25305","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25495","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28333","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30161","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/33937","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200705-02.xml","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200705-10.xml","source":"secalert@redhat.com"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=498954","source":"secalert@redhat.com"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=498954","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3438","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-193.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2007/dsa-1294","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2008/dsa-1454","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:079","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:080","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:081","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2007_27_x.html","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2007_6_sr.html","source":"secalert@redhat.com"},{"url":"http://www.openbsd.org/errata39.html#021_xorg","source":"secalert@redhat.com"},{"url":"http://www.openbsd.org/errata40.html#011_xorg","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0126.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0132.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0150.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/464686/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/464816/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/23283","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/23300","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/23402","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1017857","source":"secalert@redhat.com"},{"url":"http://www.trustix.org/errata/2007/0013/","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-448-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/1217","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/1264","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/1548","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33417","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1213","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810","source":"secalert@redhat.com"},{"url":"http://issues.foresightlinux.org/browse/FL-223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2007-0125.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/24745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/24771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200705-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200705-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=498954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=498954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-193.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2007/dsa-1294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2007_27_x.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2007_6_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata39.html#021_xorg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata40.html#011_xorg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0132.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0150.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/464686/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/464816/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/23283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/23300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/23402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1017857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.org/errata/2007/0013/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-448-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-2754","sourceIdentifier":"secalert@redhat.com","published":"2007-05-17T22:30:00.000","lastModified":"2026-06-16T22:40:14.943","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow."},{"lang":"es","value":"Error de presencia de signo en entero en truetype/ttgload.c de Freetype 2.3.4 y versiones anteriores podría permitir a atacantes remotos ejecutar código de su elección mediante una imagen TTF manipulada con un valor n_points negativo, lo que conduce a un desbordamiento de entero y desbordamiento de búfer basado en montículo. \r\n"}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.4","matchCriteriaId":"758A1746-60B0-4352-8074-AAE6C1BC4F32"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc","source":"secalert@redhat.com"},{"url":"http://cvs.savannah.nongnu.org/viewvc/freetype2/src/truetype/ttgload.c?root=freetype&r1=1.177&r2=1.178","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.gnu.org/archive/html/freetype-devel/2007-04/msg00041.html","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://osvdb.org/36509","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25350","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25353","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25386","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25463","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25483","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25609","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25612","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25654","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25705","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25808","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25894","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/25905","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/26129","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/26305","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/28298","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/30161","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35074","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35200","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35204","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/35233","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102967-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103171-1","source":"secalert@redhat.com"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200033-1","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT3549","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-330.htm","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2007/dsa-1302","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2007/dsa-1334","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200705-22.xml","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200707-02.xml","source":"secalert@redhat.com"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:121","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2007_41_freetype2.html","source":"secalert@redhat.com"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.018.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0403.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0329.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1062.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/469463/100/200/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/471286/30/6180/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/24074","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1018088","source":"secalert@redhat.com"},{"url":"http://www.trustix.org/errata/2007/0019/","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/usn-466-1","source":"secalert@redhat.com"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"secalert@redhat.com","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2007/1894","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2007/2229","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2008/0049","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=240200","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502565","source":"secalert@redhat.com"},{"url":"https://issues.rpath.com/browse/RPL-1390","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11325","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5532","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html","source":"secalert@redhat.com"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.savannah.nongnu.org/viewvc/freetype2/src/truetype/ttgload.c?root=freetype&r1=1.177&r2=1.178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.gnu.org/archive/html/freetype-devel/2007-04/msg00041.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/36509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/28298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102967-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-103171-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200033-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2007-330.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2007/dsa-1302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2007/dsa-1334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200705-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200707-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2007_41_freetype2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0403.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0329.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1062.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/469463/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/471286/30/6180/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/24074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1018088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.org/errata/2007/0019/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-466-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2007/1894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/0049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=240200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-3408","sourceIdentifier":"cve@mitre.org","published":"2007-06-26T18:30:00.000","lastModified":"2026-06-16T22:41:58.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Dia before 0.96.1-6 have unspecified attack vectors and impact, probably involving the use of vulnerable FreeType libraries that contain CVE-2007-2754 and/or CVE-2007-1351."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Dia anterior a 0.96.1-6 tienen impacto y vectores de ataque no especificados, probablemente implicando el uso de librerías FreeType vulnerables que contienen CVE-2007-2754 y/o CVE-2007-1351."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dia:dia:*:*:*:*:*:*:*:*","versionEndIncluding":"0.96.1","matchCriteriaId":"9ABAC05E-71C5-4F92-BC5F-D207212EA405"}]}]}],"references":[{"url":"http://secunia.com/advisories/25810","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=709959","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2007/2328","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=709959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2007/2328","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorImpact":"Vulnerability type and impact were gathered from hyperlink resources."}},{"cve":{"id":"CVE-2007-3506","sourceIdentifier":"cve@mitre.org","published":"2007-07-02T19:30:00.000","lastModified":"2026-06-16T22:42:10.963","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The ft_bitmap_assure_buffer function in src/base/ftbimap.c in FreeType 2.3.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors involving bitmap fonts, related to a \"memory buffer overwrite bug.\""},{"lang":"es","value":"La función ft_bitmap_assure_buffer en src/base/ftbimap.c de FreeType 2.3.3 permite a atacantes remotos dependientes del contexto provocar una denegación de servicio y posiblemente ejecutar código de su elección mediante vectores no especificados que implican fuentes de mapas de bits, relacionado con \"fallo de sobrescritura de memoria de búfer\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.3","matchCriteriaId":"5013DA85-1746-4272-BDD3-19A5F06565F8"}]}]}],"references":[{"url":"http://cvs.savannah.nongnu.org/viewvc/freetype2/src/base/ftbitmap.c?root=freetype&r1=1.17&r2=1.18","source":"cve@mitre.org"},{"url":"http://savannah.nongnu.org/bugs/index.php?19536","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25884","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/24708","source":"cve@mitre.org"},{"url":"https://sourceforge.net/project/shownotes.php?group_id=3157&release_id=499970","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://cvs.savannah.nongnu.org/viewvc/freetype2/src/base/ftbitmap.c?root=freetype&r1=1.17&r2=1.18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://savannah.nongnu.org/bugs/index.php?19536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/24708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/project/shownotes.php?group_id=3157&release_id=499970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. These issues did not affect the versions of freetype as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.","lastModified":"2007-07-05T00:00:00"}]}},{"cve":{"id":"CVE-2008-1806","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T19:41:00.000","lastModified":"2026-06-16T22:52:31.580","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de entero en FreeType2 anterior a 2.3.6, permite a atacantes dependientes del contexto ejecutar código arbitrario a través de un set de valores manipulados de un tamaño 16-bit  dentro de la tabla de diccionario Private en un archivo Printer Font Binary (PFB), lo que provoca un desbordamiento de búfer basado en montículo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=715","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30721","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30740","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30819","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31479","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31577","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31711","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31712","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31823","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200806-10.xml","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020238","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3026","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3129","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:121","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0556.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0558.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495497/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29640","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-643-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1794","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1876/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2423","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2608","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9321","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0556.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0558.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495497/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-643-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1876/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1807","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T19:41:00.000","lastModified":"2026-06-16T22:52:31.893","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid \"number of axes\" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption."},{"lang":"es","value":"FreeType2 versiones anteriores a 2.3.6 permite a atacantes dependientes de contexto ejecutar código de su elección a través de un campo \"número de axes\" inválido en un fichero Printer Font Binary (PFB), lo cual dispara una liberación de localizaciones de memoria de su elección, provocando corrupción de memoria."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=716","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30721","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30740","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30819","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31479","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31577","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31711","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31712","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31823","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200806-10.xml","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020239","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3026","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3129","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:121","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0556.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0558.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495497/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29641","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-643-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1794","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1876/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2423","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2608","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9767","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0556.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0558.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495497/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-643-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1876/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-1808","sourceIdentifier":"cve@mitre.org","published":"2008-06-16T19:41:00.000","lastModified":"2026-06-16T22:52:32.203","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow."},{"lang":"es","value":"Múltiples errores de superación de límite (off-by-one) en FreeType2 antes de 2.3.6 permite a atacantes dependientes del contexto ejecutar código arbitrario mediante (1) una tabla manipulada en un archivo Printer Font Binary (PFB) o (2) una instrucción SHC manipulada en un archivo TrueType Font (TTF), lo que dispara un desbordamiento de búfer basado en montículo."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"7B4450B4-B21F-4153-B9DD-C36A2381F00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"}]}]}],"references":[{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=717","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30600","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30721","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30740","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30819","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/30967","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31479","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31577","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31711","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31712","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31823","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31856","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33937","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35204","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200806-10.xml","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1020240","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3026","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3129","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3438","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm","source":"cve@mitre.org"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:121","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0556.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0558.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0329.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495497/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/29637","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29639","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-643-1","source":"cve@mitre.org"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"cve@mitre.org"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1794","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/1876/references","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2423","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"cve@mitre.org"},{"url":"https://issues.rpath.com/browse/RPL-2608","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11188","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html","source":"cve@mitre.org"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html","source":"cve@mitre.org"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/30721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/30967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/33937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200806-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201209-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1020240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0556.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0558.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0329.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495497/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/495869/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/29637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/29639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-643-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/security/advisories/VMSA-2008-0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player/doc/releasenotes_player.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/player2/doc/releasenotes_player2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/server/doc/releasenotes_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/1876/references","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2008/2558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-2608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-0946","sourceIdentifier":"cve@mitre.org","published":"2009-04-17T00:30:00.250","lastModified":"2026-06-16T23:06:10.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c."},{"lang":"es","value":"Múltiples desbordamientos de entero en FreeType v2.3.9 y anteriores permiten a atacantes remotos ejecutar código de su elección mediante vectores relacionados con valores grandes en ciertas entradas en (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, y (3) cff/cffload.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.9","matchCriteriaId":"7039ABA3-F36E-4337-8F61-470B2FA1C9EF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F92AB32-E7DE-43F4-B877-1F41FA162EC7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"036E8A89-7A16-411F-9D31-676313BB7244"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*","matchCriteriaId":"4747CC68-FAF4-482F-929A-9DA6C24CB663"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*","matchCriteriaId":"C35B68DF-1440-4587-8458-9C5F4D1E43F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*","matchCriteriaId":"1B42AB65-443B-4655-BAEA-4EB4A43D9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*","matchCriteriaId":"FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:10:-:*:*:*:*:*:*","matchCriteriaId":"38C3AEB0-59E2-400A-8943-60C0A223B680"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*","matchCriteriaId":"F13F07CC-739B-465C-9184-0E9D708BD4C7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDA6DB4-A0DA-43CA-AABD-10EEEEB28EAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionStartIncluding":"1.0.0","versionEndIncluding":"2.2.1","matchCriteriaId":"614C28E3-3645-4B20-95E5-42E7F123ADDB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndIncluding":"10.6.4","matchCriteriaId":"C6DA1D55-B689-47CF-A55F-3C16DA4EFFFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6EE39585-CF3B-4493-96D8-B394544C7643"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1335E35A-D381-4056-9E78-37BC6DF8AD98"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionStartIncluding":"10.6.0","versionEndIncluding":"10.6.4","matchCriteriaId":"924AFEE6-E331-4E10-B1B8-1FF1FF801120"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*","matchCriteriaId":"D09D5933-A7D9-4A61-B863-CD8E7D5E67D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*","matchCriteriaId":"82B4CD59-9F37-4EF0-BA43-427CFD6E1329"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0545ec1ca36b27cb928128870a83e5f668980bc5","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=79972af4f0485a11dcb19551356c45245749fc5b","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a18788b14db60ae3673f932249cd02d33a227c4e","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLog","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34723","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34913","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34967","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35198","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35200","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35204","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35210","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35379","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200905-05.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270268-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1784","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:243","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0329.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1061.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1062.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34550","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-767-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1058","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491384","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10149","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0545ec1ca36b27cb928128870a83e5f668980bc5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=79972af4f0485a11dcb19551356c45245749fc5b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a18788b14db60ae3673f932249cd02d33a227c4e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/34723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/34967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/35379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200905-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-270268-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT3639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2009/dsa-1784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2009:243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0329.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1062.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-767-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/1621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=491384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10149","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-1797","sourceIdentifier":"product-security@apple.com","published":"2010-08-16T18:39:40.403","lastModified":"2026-06-16T23:19:21.610","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted CFF opcodes in embedded fonts in a PDF document, as demonstrated by JailbreakMe. NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la región ?stack de la memoria en la función cff_decoder_parse_charstrings en el intérprete CFF Type2 CharStrings en el archivo cff/cffgload.c en FreeType anterior a versión  2.4.2, tal y como es usado en iOS de Apple anterior a versión  4.0.2 en el iPhone y iPod touch y anterior a versión 3.2.2 en el iPad, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) por medio de códigos CFF  especialmente diseñados en fuentes insertadas en un documento PDF, como es demostrado por JailbreakMe. NOTA: algunos de estos detalles son obtenidos de información de terceros."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:-:iphone:*:*:*:*:*","matchCriteriaId":"B669868B-F358-4D5B-9D64-4A462F261553"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:-:iphone:*:*:*:*:*","matchCriteriaId":"A14B31DE-AA3D-4FA2-A4F4-0A6A51AFA7FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:-:iphone:*:*:*:*:*","matchCriteriaId":"4261E5C1-DC93-437E-B84F-A30380AFDC40"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"079BB54C-25FD-4B26-B171-368911960F76"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:-:iphone:*:*:*:*:*","matchCriteriaId":"DF292FED-19A4-4031-9B1F-151C0146F3B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:-:iphone:*:*:*:*:*","matchCriteriaId":"5183082C-556F-479F-9FC1-42B59BBB840B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"AAC3FBF0-F128-412D-9FD5-13BB2EB92DD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:-:iphone:*:*:*:*:*","matchCriteriaId":"2FFCFEA4-C5E2-4C46-B8C3-ADCDBA4B85EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"7E7AA027-8CF9-49BD-A000-82880E41D622"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:-:iphone:*:*:*:*:*","matchCriteriaId":"4FA51920-223B-4DF4-802C-188F5A8B0563"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"4385635D-46F2-4642-9C78-1346DC120492"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:-:iphone:*:*:*:*:*","matchCriteriaId":"2C63C36E-1997-4F44-80AD-E665CE46A278"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"20DAE911-C037-4F10-82A3-EF42D5FB71D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:-:iphone:*:*:*:*:*","matchCriteriaId":"02BFDD6F-B9C3-42BB-A84A-828193FAA137"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"0A66D6DC-9A48-4BD6-9E01-0D9FF388457C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:-:iphone:*:*:*:*:*","matchCriteriaId":"CFD4325B-A86A-4C1B-930F-56C17FB6281D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"C59B8C50-BF5D-4E9A-8E5B-99B34E974B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:-:iphone:*:*:*:*:*","matchCriteriaId":"2904DEFA-7769-43DB-B3D0-B552AE8F06A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"D4CE4199-BBF5-4F42-8BBC-BD946079C912"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:-:iphone:*:*:*:*:*","matchCriteriaId":"0AD5106E-CD7C-4952-A9B1-5F72D99276E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"34346F55-4972-427B-8F96-780FA91DB95D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:-:iphone:*:*:*:*:*","matchCriteriaId":"B7235341-983F-4578-98DC-39BC278A7556"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:-:iphone:*:*:*:*:*","matchCriteriaId":"BA5C2D75-4019-45EB-8AF9-A850B5349507"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"AD136376-331D-494F-9D12-7E631546E8CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:-:iphone:*:*:*:*:*","matchCriteriaId":"A066B59B-D5C8-4AA8-9CC7-5D34F4AB88AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"F07B3FE7-96B3-493A-A230-5642BA11FBDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"9FB0870F-82CF-4C97-BDC6-F0C4BBE7462D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*","matchCriteriaId":"51D3BE2B-5A01-4AD4-A436-0056B50A535D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1:-:iphone:*:*:*:*:*","matchCriteriaId":"E357722F-4976-4E47-BFB5-709480BAE267"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"F43A6FEC-ECA9-44A4-AD00-FDC6F3990DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9A20F171-79FE-43B9-8309-B18341639FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1.2:-:iphone:*:*:*:*:*","matchCriteriaId":"7CA92907-90C9-4BD6-8EE8-8FA6298C3D0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"52283848-67CC-4E4B-A849-1225F2BCBD9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"126EF22D-29BC-4366-97BC-B261311E6251"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1.3:-:iphone:*:*:*:*:*","matchCriteriaId":"220590DA-2B6A-4FC9-B456-3053EED9D96E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*","matchCriteriaId":"3B3DD7B3-DA4C-4B0A-A94E-6BF66B358B7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2:-:iphone:*:*:*:*:*","matchCriteriaId":"3FE3CDE8-6497-445E-A845-8A1C2A4EDEB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"9E4D3134-28BC-4C30-A9B0-559338FBBDFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3A939B80-0AD0-48AF-81A7-370716F56639"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2.1:-:ipad:*:*:*:*:*","matchCriteriaId":"98C41674-370B-4CF0-817B-3843D93A10DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*","matchCriteriaId":"12E22AF0-2B66-425A-A1EE-4F0E3B0433E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0:-:iphone:*:*:*:*:*","matchCriteriaId":"954CDDCB-AC22-448D-8ECA-CFA4DBA1BC27"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"54FECD66-4216-43FC-9959-B8EA9545449C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB34ECBE-33E8-40E1-936B-7800D2525AE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0.1:-:iphone:*:*:*:*:*","matchCriteriaId":"ECE983F6-A597-4581-A254-80396B54F2D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"586C0CB3-98E5-4CB3-8F23-27F01233D6C4"}]}]}],"references":[{"url":"http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2","source":"product-security@apple.com"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=018f5c27813dd7eef4648fe254632ecea0c85a50","source":"product-security@apple.com"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=11d65e8a1f1f14e56148fd991965424d9bd1cdbc","source":"product-security@apple.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Aug/msg00000.html","source":"product-security@apple.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Aug/msg00001.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/66828","source":"product-security@apple.com"},{"url":"http://secunia.com/advisories/40807","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40816","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40982","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"product-security@apple.com"},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view","source":"product-security@apple.com"},{"url":"http://support.apple.com/kb/HT4291","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4292","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/14538","source":"product-security@apple.com","tags":["Exploit"]},{"url":"http://www.f-secure.com/weblog/archives/00002002.html","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/42151","source":"product-security@apple.com","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-972-1","source":"product-security@apple.com"},{"url":"http://www.vupen.com/english/advisories/2010/2018","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2106","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"product-security@apple.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=621144","source":"product-security@apple.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/60856","source":"product-security@apple.com"},{"url":"http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=018f5c27813dd7eef4648fe254632ecea0c85a50","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=11d65e8a1f1f14e56148fd991965424d9bd1cdbc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://osvdb.org/66828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/14538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.f-secure.com/weblog/archives/00002002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/42151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubuntu.com/usn/USN-972-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/2018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=621144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/60856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-2497","sourceIdentifier":"secalert@redhat.com","published":"2010-08-19T18:00:03.857","lastModified":"2026-06-16T23:20:51.913","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file."},{"lang":"es","value":"Desbordamiento de entero glyph manejado en FreeType anterior a v2.4.0 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código de su elección a través de un fichero fuente manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-191"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.0","matchCriteriaId":"08BB787B-4D62-4277-819C-3E627B9B7FC8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.5","matchCriteriaId":"46E5D24A-8CA0-4590-9F35-F684D573D030"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7d3d2cc4fef72c6be9c454b3809c387e12b44cfc","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127905701201340&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127909326909362&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:137","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613154","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30082","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30083","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7d3d2cc4fef72c6be9c454b3809c387e12b44cfc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127905701201340&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127909326909362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2498","sourceIdentifier":"secalert@redhat.com","published":"2010-08-19T18:00:04.000","lastModified":"2026-06-16T23:20:52.037","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted font file that triggers an invalid free operation."},{"lang":"es","value":"La función psh_glyph_find_strong_points en pshinter/pshalgo.c de FreeType anterior a v2.4.0 no implementa adecuadamente mascaras sugeridas, lo cual permite a atacantes remotos causar una denegación de servicio (corrupción en la pila de memoria y fallo de la aplicación) o posiblemente ejecutar código a su elección a través de ficheros de fuentes manipulados que provocan una operación libre no válida."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.0","matchCriteriaId":"08BB787B-4D62-4277-819C-3E627B9B7FC8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.5","matchCriteriaId":"46E5D24A-8CA0-4590-9F35-F684D573D030"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8d22746c9e5af80ff4304aef440986403a5072e2","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127905701201340&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127909326909362&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024266","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:137","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0578.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-963-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613160","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30106","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8d22746c9e5af80ff4304aef440986403a5072e2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127905701201340&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127909326909362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0578.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-963-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2499","sourceIdentifier":"secalert@redhat.com","published":"2010-08-19T18:00:04.140","lastModified":"2026-06-16T23:20:52.167","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment."},{"lang":"es","value":"Desbordamiento de búfer en la función Mac_Read_POST_Resource en base/ftobjs.c de FreeType anterior a v2.4.0 permite a atacantes remotos causar una denegación de servicio (fallo de la aplicación) o posiblemente ejecutar código a su elección a través de ficheros de fuentes LaserWriter PS manipulados con un fragmento PFB incrustado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.0","matchCriteriaId":"08BB787B-4D62-4277-819C-3E627B9B7FC8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.5","matchCriteriaId":"46E5D24A-8CA0-4590-9F35-F684D573D030"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=c69891a1345640096fbf396e8dd567fe879ce233","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f29f741efbba0a5ce2f16464f648fb8d026ed4c8","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127905701201340&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127909326909362&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024266","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:137","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0578.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-963-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613162","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30248","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30249","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=c69891a1345640096fbf396e8dd567fe879ce233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f29f741efbba0a5ce2f16464f648fb8d026ed4c8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127905701201340&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127909326909362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0578.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-963-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30249","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2500","sourceIdentifier":"secalert@redhat.com","published":"2010-08-19T18:00:04.280","lastModified":"2026-06-16T23:20:52.307","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file."},{"lang":"es","value":"Desbordamiento de entero en la función gray_render_span en smooth/ftgrays.c en FreeType anterior a v2.4.0 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código de su elección a través de un fichero fuente manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.0","matchCriteriaId":"08BB787B-4D62-4277-819C-3E627B9B7FC8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.5","matchCriteriaId":"46E5D24A-8CA0-4590-9F35-F684D573D030"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=6305b869d86ff415a33576df6d43729673c66eee","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127905701201340&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127909326909362&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024266","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:137","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0577.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0578.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-963-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613167","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30263","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=6305b869d86ff415a33576df6d43729673c66eee","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127905701201340&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127909326909362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0577.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0578.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-963-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2519","sourceIdentifier":"secalert@redhat.com","published":"2010-08-19T18:00:04.357","lastModified":"2026-06-16T23:20:54.460","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en la función Mac_Read_POST_Resource en base/ftobjs.c de FreeType anterior a v2.4.0 permite a atacantes remotos causar una denegación de servicio (fallo de la aplicación) o posiblemente ejecutar código a su elección a través de manipular el valor longitud en un fragmento de cabecera POST de un fichero de fuente."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.0","matchCriteriaId":"08BB787B-4D62-4277-819C-3E627B9B7FC8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.5","matchCriteriaId":"46E5D24A-8CA0-4590-9F35-F684D573D030"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=5ef20c8c1d4de12a84b50ba497c2a358c90ec44b","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b2ea64bcc6c385a8e8318f9c759450a07df58b6d","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127905701201340&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127909326909362&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024266","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:137","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0578.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-963-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613194","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30306","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=5ef20c8c1d4de12a84b50ba497c2a358c90ec44b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b2ea64bcc6c385a8e8318f9c759450a07df58b6d","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127905701201340&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127909326909362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0578.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-963-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2520","sourceIdentifier":"secalert@redhat.com","published":"2010-08-19T18:00:04.500","lastModified":"2026-06-16T23:20:54.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file."},{"lang":"es","value":"Desbordamiento de búfer basado en la memoria dinámica en la función Ins_IUP en truetype/ttinterp.c en FreeType anterior a v2.4.0, cuando TrueType bytecode support está habilitado, permite a a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código de su elección a través de ficheros fuente manipulados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","baseScore":5.1,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.0","matchCriteriaId":"08BB787B-4D62-4277-819C-3E627B9B7FC8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.5","matchCriteriaId":"46E5D24A-8CA0-4590-9F35-F684D573D030"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=888cd1843e935fe675cf2ac303116d4ed5b9d54b","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127905701201340&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127909326909362&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:137","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-963-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613198","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30361","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=888cd1843e935fe675cf2ac303116d4ed5b9d54b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127905701201340&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127909326909362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-963-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2527","sourceIdentifier":"secalert@redhat.com","published":"2010-08-19T18:00:04.607","lastModified":"2026-06-16T23:20:55.453","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file."},{"lang":"es","value":"Múltiples desbordamientos de búfer en programas de demostración de FreeType anterior a v2.4.0 permite a atacantes remotos causar una denegación de servicio (fallo de la aplicación) o posiblemente ejecutar código a su elección a través de ficheros de fuentes manipulados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.0","matchCriteriaId":"08BB787B-4D62-4277-819C-3E627B9B7FC8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8C757774-08E7-40AA-B532-6F705C8F7639"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2-demos.git/commit/?id=b995299b73ba4cd259f221f500d4e63095508bec","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"secalert@redhat.com","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127912955808467&w=2","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://savannah.nongnu.org/bugs/?30054","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024266","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0577.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0578.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-963-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=614557","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2-demos.git/commit/?id=b995299b73ba4cd259f221f500d4e63095508bec","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Release Notes","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=127912955808467&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://savannah.nongnu.org/bugs/?30054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2010/dsa-2070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0577.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0578.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-963-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=614557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2541","sourceIdentifier":"secalert@redhat.com","published":"2010-08-19T18:00:04.843","lastModified":"2026-06-16T23:20:56.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file."},{"lang":"es","value":"Desbordamiento de búfer en ftmulti.c en el programa ftmulti demo en FreeType anterior a v2.4.2 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código de su elección a través de un fichero fuente manipulado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.2","matchCriteriaId":"33E14690-3A9D-45C7-A270-3433F79DEC28"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]}],"references":[{"url":"http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2","source":"secalert@redhat.com","tags":["Release Notes","Third Party Advisory"]},{"url":"http://secunia.com/advisories/40982","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024266","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0577.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0578.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-972-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2106","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"secalert@redhat.com","tags":["Issue Tracking","Release Notes","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=617342","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://secunia.com/advisories/40982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0577.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0578.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-972-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Release Notes","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=617342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2805","sourceIdentifier":"secalert@redhat.com","published":"2010-08-19T18:00:04.920","lastModified":"2026-06-16T23:21:32.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file."},{"lang":"es","value":"La función FT_Stream_EnterFrame en base/ftstream.c de FreeType anterior a v2.4.2 no valida adecuadamente los valores de cierta posición, lo cual permite a atacantes remotos causar una denegación de servicio (fallo de la aplicación) o posiblemente ejecutar código a su elección a través de ficheros de fuentes manipulados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.2","matchCriteriaId":"33E14690-3A9D-45C7-A270-3433F79DEC28"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"4.2","matchCriteriaId":"D9636697-5FDF-4F67-A95B-D74DDD67A5DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.5","matchCriteriaId":"46E5D24A-8CA0-4590-9F35-F684D573D030"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"4.1.0","matchCriteriaId":"407115F2-CC65-448B-8133-D3D57AD306BA"}]}]}],"references":[{"url":"http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2","source":"secalert@redhat.com","tags":["Release Notes","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=45a3c76b547511fa9d97aca34b150a0663257375","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=128111955616772&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/40816","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40982","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42314","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42317","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4456","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4457","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0864.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/42285","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-972-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2018","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2106","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"secalert@redhat.com","tags":["Issue Tracking","Release Notes","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30644","source":"secalert@redhat.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=45a3c76b547511fa9d97aca34b150a0663257375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=128111955616772&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/40816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0864.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/42285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-972-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Release Notes","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2806","sourceIdentifier":"secalert@redhat.com","published":"2010-08-19T18:00:05.107","lastModified":"2026-06-16T23:21:32.490","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based buffer overflow."},{"lang":"es","value":"Error de índice de array en la función t42_parse_sfnts en type42/t42parse.c de FreeType anterior a v2.4.2 permite a atacantes remotos causar una denegación de servicio (fallo de la aplicación) o posiblemente ejecutar código a su elección a través de valores de tamaño negativo para ciertas cadenas en ficheros de fuentes FontType42, llevando a desbordamientos de búfer basados en pila."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-129"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.2","matchCriteriaId":"33E14690-3A9D-45C7-A270-3433F79DEC28"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"4.2","matchCriteriaId":"D9636697-5FDF-4F67-A95B-D74DDD67A5DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.5","matchCriteriaId":"46E5D24A-8CA0-4590-9F35-F684D573D030"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"4.1.0","matchCriteriaId":"407115F2-CC65-448B-8133-D3D57AD306BA"}]}]}],"references":[{"url":"http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2","source":"secalert@redhat.com","tags":["Release Notes","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=c06da1ad34663da7b6fc39b030dc3ae185b96557","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=128111955616772&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/40816","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40982","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42314","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42317","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4456","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4457","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0864.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/42285","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-972-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2018","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2106","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"secalert@redhat.com","tags":["Issue Tracking","Release Notes","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=621980","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0736.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0737.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://savannah.nongnu.org/bugs/?30656","source":"secalert@redhat.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=c06da1ad34663da7b6fc39b030dc3ae185b96557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=128111955616772&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/40816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0864.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/42285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-972-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Release Notes","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=621980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0736.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0737.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://savannah.nongnu.org/bugs/?30656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2807","sourceIdentifier":"secalert@redhat.com","published":"2010-08-19T18:00:05.217","lastModified":"2026-06-16T23:21:32.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file."},{"lang":"es","value":"FreeType anterior a v2.4.2 utiliza incorrectametne tipos de datos entero durante la comprobación de límites, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código de su elección a través de ficheros fuente manipulados."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-681"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.2","matchCriteriaId":"33E14690-3A9D-45C7-A270-3433F79DEC28"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*","matchCriteriaId":"7EBFE35C-E243-43D1-883D-4398D71763CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"4.2","matchCriteriaId":"D9636697-5FDF-4F67-A95B-D74DDD67A5DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.5","matchCriteriaId":"46E5D24A-8CA0-4590-9F35-F684D573D030"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"4.1.0","matchCriteriaId":"407115F2-CC65-448B-8133-D3D57AD306BA"}]}]}],"references":[{"url":"http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2","source":"secalert@redhat.com","tags":["Release Notes","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=346f1867fd32dae8f56e5b482d1af98f626804ac","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=128111955616772&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/40816","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40982","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42314","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42317","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view","source":"secalert@redhat.com","tags":["Product","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4456","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4457","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/42285","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-972-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2018","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2106","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"secalert@redhat.com","tags":["Issue Tracking","Release Notes","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30657","source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=346f1867fd32dae8f56e5b482d1af98f626804ac","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=128111955616772&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/40816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/42285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-972-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Release Notes","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?30657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-2808","sourceIdentifier":"secalert@redhat.com","published":"2010-08-19T18:00:05.327","lastModified":"2026-06-16T23:21:32.793","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Type 1 Mac Font File (aka LWFN) font."},{"lang":"es","value":"Desbordamiento de búfer en la función Mac_Read_POST_Resource en base/ftobjs.c de FreeType anterior a v2.4.2 permite a atacantes remotos causar una denegación de servicio (corrupción de memoria y fallo de la aplicación) o posiblemente ejecutar código a su elección a través de fuentes Adobe Type 1 Mac Font File (también conocido como LWFN) manipuladas."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.4.2","matchCriteriaId":"33E14690-3A9D-45C7-A270-3433F79DEC28"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"4.2","matchCriteriaId":"D9636697-5FDF-4F67-A95B-D74DDD67A5DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndExcluding":"10.6.5","matchCriteriaId":"46E5D24A-8CA0-4590-9F35-F684D573D030"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*","versionEndExcluding":"4.1.0","matchCriteriaId":"407115F2-CC65-448B-8133-D3D57AD306BA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*","matchCriteriaId":"454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*","matchCriteriaId":"C91D2DBF-6DA7-4BA2-9F29-8BD2725A4701"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*","matchCriteriaId":"A5D026D0-EF78-438D-BEDD-FC8571F3ACEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*","matchCriteriaId":"01EDA41C-6B2E-49AF-B503-EB3882265C11"}]}]}],"references":[{"url":"http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2","source":"secalert@redhat.com","tags":["Release Notes","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=81f3472c0ba7b8f6466e2e214fa8c1c17fade975","source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"secalert@redhat.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=128110167119337&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=128111955616772&w=2","source":"secalert@redhat.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/40816","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40982","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42314","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42317","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view","source":"secalert@redhat.com","tags":["Product","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4456","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4457","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0864.html","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/42285","source":"secalert@redhat.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-972-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2018","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2106","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"secalert@redhat.com","tags":["Issue Tracking","Release Notes","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=621907","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0737.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"https://savannah.nongnu.org/bugs/?30658","source":"secalert@redhat.com","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=81f3472c0ba7b8f6466e2e214fa8c1c17fade975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=128110167119337&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://marc.info/?l=oss-security&m=128111955616772&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://secunia.com/advisories/40816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/40982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/42317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.apple.com/kb/HT4456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0864.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/42285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-972-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/2106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Release Notes","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=621907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0737.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://savannah.nongnu.org/bugs/?30658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2010-3053","sourceIdentifier":"cve@mitre.org","published":"2010-08-19T18:00:06.453","lastModified":"2026-06-16T23:22:02.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"bdf/bdflib.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) via a crafted BDF font file, related to an attempted modification of a value in a static string."},{"lang":"es","value":"bdf/bdflib.c en FreeType en versiones anteriores a la 2.4.2 permite a atacantes remotos provocar una denegación de servicio (caída de la aplicación) mediante una fichero de fuentes BDF modificado, relacionado con un intento de modificación de un valor en una cadena estática."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.1","matchCriteriaId":"462D9B4F-23B3-4EEC-8E15-A6756D36EEA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"7B4450B4-B21F-4153-B9DD-C36A2381F00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42314","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42317","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/48951","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4435","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4456","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4457","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-3054","sourceIdentifier":"cve@mitre.org","published":"2010-08-19T18:00:06.530","lastModified":"2026-06-16T23:22:02.283","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c."},{"lang":"es","value":"Vulnerabilidad no especificada en FreeType 2.3.9 y otras versiones anteriores a la 2.4.2, permite a atacantes remotos provocar una denegación de servicio mediante vectores involucrados en llamadas anidadas Standard Encoding Accented Character (también conocido como seac), relacionadas con psaux.h, cffgload.c, cffgload.h y t1decode.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42314","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/42317","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/48951","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4435","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4456","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT4457","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/42621","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0736.html","source":"cve@mitre.org"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0737.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/42621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0736.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0737.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-3814","sourceIdentifier":"product-security@apple.com","published":"2010-11-26T20:00:02.923","lastModified":"2026-06-16T23:23:35.400","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document with a crafted embedded font."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica en la función Ins_SHZ en ttinterp.c en FreeType v2.4.3 y anteriores permite a atacantes remotos ejecutar código a su o elección y causar una denegación de servicio (cuelgue de aplicación) a través de una instrucción SHZ bytecode manipulada, relacionados con opcodes TrueType, como lo demuestra un documento PDF con una fuente manipulada incrustada."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.3","matchCriteriaId":"221E5B57-16B2-4FB7-A469-1914D9E3F35E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"7B4450B4-B21F-4153-B9DD-C36A2381F00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602221","source":"product-security@apple.com"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0edf0986f3be570f5bf90ff245a85c1675f5c9a4","source":"product-security@apple.com"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","source":"product-security@apple.com"},{"url":"http://secunia.com/advisories/42314","source":"product-security@apple.com"},{"url":"http://secunia.com/advisories/43138","source":"product-security@apple.com"},{"url":"http://secunia.com/advisories/48951","source":"product-security@apple.com"},{"url":"http://security-tracker.debian.org/tracker/CVE-2010-3814","source":"product-security@apple.com"},{"url":"http://support.apple.com/kb/HT4456","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4581","source":"product-security@apple.com"},{"url":"http://www.debian.org/security/2011/dsa-2155","source":"product-security@apple.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:236","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/44643","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id?1024767","source":"product-security@apple.com"},{"url":"http://www.ubuntu.com/usn/USN-1013-1","source":"product-security@apple.com"},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"product-security@apple.com"},{"url":"http://www.vupen.com/english/advisories/2011/0246","source":"product-security@apple.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0edf0986f3be570f5bf90ff245a85c1675f5c9a4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security-tracker.debian.org/tracker/CVE-2010-3814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2011/dsa-2155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/44643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1024767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1013-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0246","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-3855","sourceIdentifier":"secalert@redhat.com","published":"2010-11-26T20:00:03.393","lastModified":"2026-06-16T23:23:40.953","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ft_var_readpackedpoints function in truetype/ttgxvar.c in FreeType 2.4.3 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted TrueType GX font."},{"lang":"es","value":"Desbordamiento de búfer en la función ft_var_readpackedpoints en truetype/ttgxvar.c en FreeType v2.4.3 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código arbitrario a través de una fuente TrueType GX manipulada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.3","matchCriteriaId":"221E5B57-16B2-4FB7-A469-1914D9E3F35E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"7B4450B4-B21F-4153-B9DD-C36A2381F00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602221","source":"secalert@redhat.com"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=59eb9f8cfe7d1df379a2318316d1f04f80fba54a","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050965.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051231.html","source":"secalert@redhat.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051251.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42289","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42295","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/43138","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4564","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4565","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4581","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4802","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT4803","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/css/P8/documents/100122733","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2011/dsa-2155","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:235","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:236","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0889.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/44214","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1024745","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1013-1","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2010/3037","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2011/0246","source":"secalert@redhat.com"},{"url":"https://savannah.nongnu.org/bugs/?31310","source":"secalert@redhat.com"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=59eb9f8cfe7d1df379a2318316d1f04f80fba54a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2011//Mar/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050965.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051231.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051251.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/css/P8/documents/100122733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2011/dsa-2155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0889.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/44214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1024745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1013-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/3037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://savannah.nongnu.org/bugs/?31310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-3311","sourceIdentifier":"secalert@redhat.com","published":"2011-01-07T23:00:18.827","lastModified":"2026-06-16T23:22:33.727","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an \"input stream position error\" issue, a different vulnerability than CVE-2010-1797."},{"lang":"es","value":"Desbordamiento de enteros en base/ftstream.c en libXft (también conocida como la librería FreeType X) en FreeType anterior a v2.4 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código arbitrario mediante un archivo  de Formato de Fuente Compacto (CFF) manipulado que provoca un desbordamiento de búfer basado en memoria dinámica, relacionado con un \"error de posición en el flujo de entrada\", una vulnerabilidad diferente de CVE-2010-1797."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.12","matchCriteriaId":"05932F1E-2960-4CEB-9DB6-A05977E11AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"7B4450B4-B21F-4153-B9DD-C36A2381F00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2010/dsa-2116","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:201","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0864.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/43700","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1013-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=623625","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0736.html","source":"secalert@redhat.com"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0737.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2010/dsa-2116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0864.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/43700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1013-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=623625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0736.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0737.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-0020","sourceIdentifier":"secalert@redhat.com","published":"2011-01-24T18:00:03.783","lastModified":"2026-06-16T23:26:38.197","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the pango_ft2_font_render_box_glyph function in pango/pangoft2-render.c in libpango in Pango 1.28.3 and earlier, when the FreeType2 backend is enabled, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file, related to the glyph box for an FT_Bitmap object."},{"lang":"es","value":"Desbordamiento de búfer basado en memoria dinámica  en la función pango_ft2_font_render_box_glyph en pango/pangoft2-render.c de libpango en Pango v1.28.3 y anteriores ,cuando el Backend FreeType2 está activo permite a atacantes remotos causar una denegación de servicio (cuelgue) o ejecutar código arbitrario a través de una a través de un archivo de fuentes manipulado, relacionado con una estuctura Glyph para un objeto de FT_Bitmap."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","baseScore":7.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:pango:*:*:*:*:*:*:*:*","versionEndIncluding":"1.28.3","matchCriteriaId":"7D5CB3EC-2F19-49E8-AE95-7713A2883000"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:pango:1.28.0:*:*:*:*:*:*:*","matchCriteriaId":"8E87EC3B-BA4D-4789-A587-6F4E7BE493A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:pango:1.28.1:*:*:*:*:*:*:*","matchCriteriaId":"1745E40F-5D42-4143-87BD-DA0D8589F738"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:pango:1.28.2:*:*:*:*:*:*:*","matchCriteriaId":"3EC5A534-F110-437F-B792-013A9EBDD933"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:0.20:*:*:*:*:*:*:*","matchCriteriaId":"DBBA8956-A704-4592-959E-A9EC812205E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:0.21:*:*:*:*:*:*:*","matchCriteriaId":"010F3DBB-624C-46F2-A1EF-FEC38944B143"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:0.22:*:*:*:*:*:*:*","matchCriteriaId":"84FE18B2-D113-4396-A51E-8F32C776A0F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:0.23:*:*:*:*:*:*:*","matchCriteriaId":"E2D9AD36-F6E5-4FC9-816A-A69AE8CA1228"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:0.24:*:*:*:*:*:*:*","matchCriteriaId":"0C00024B-7A93-4F30-B115-7FC32DFAA6A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:0.25:*:*:*:*:*:*:*","matchCriteriaId":"ABDBC115-DE56-4753-B61A-281F01906675"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:0.26:*:*:*:*:*:*:*","matchCriteriaId":"598C787A-1045-498A-B1C2-CAD997C5350B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3E5DC6F0-EB66-4FE8-B3B2-D68E6EB55BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7B6FF791-AC23-4634-AD58-96653245DFAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0A419445-E8C0-4BC1-A592-9B63FCC8354C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.3:*:*:*:*:*:*:*","matchCriteriaId":"60158B24-22F9-47AC-BEBA-119E61B95858"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.4:*:*:*:*:*:*:*","matchCriteriaId":"31EA2429-07F7-4569-9D4D-0397BD2708BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.5:*:*:*:*:*:*:*","matchCriteriaId":"603025DC-12F8-41BE-814F-515264503123"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.6:*:*:*:*:*:*:*","matchCriteriaId":"4F64E49C-25CF-4C59-AD1A-AA804AA1D746"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.7:*:*:*:*:*:*:*","matchCriteriaId":"0DA8CFE0-C9CD-4DEF-B814-380DE5AFDC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.8:*:*:*:*:*:*:*","matchCriteriaId":"F5C554F1-F4B7-47C3-B6E0-8822B205B79B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.9:*:*:*:*:*:*:*","matchCriteriaId":"1A98F2C0-72DC-415C-A809-48855DFC70F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.10:*:*:*:*:*:*:*","matchCriteriaId":"AE0ECCE2-76E8-4A4B-A6CA-EEC45E3D7403"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.11:*:*:*:*:*:*:*","matchCriteriaId":"FF9C559F-D696-4E09-8D5D-3AC39FB238EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.12:*:*:*:*:*:*:*","matchCriteriaId":"C6322FCB-DC34-4C4B-A8AE-9983927F6B25"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.13:*:*:*:*:*:*:*","matchCriteriaId":"CA3EBEF3-96D3-4DBC-90CF-9AB748CDBB22"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.14:*:*:*:*:*:*:*","matchCriteriaId":"85CB58A0-A452-40EE-818F-A56723BBBF43"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.15:*:*:*:*:*:*:*","matchCriteriaId":"94ED4EC6-F6FC-45F6-9B66-796081CC4E01"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.16:*:*:*:*:*:*:*","matchCriteriaId":"30BA57EA-8702-4247-8A75-DB5D2AD18F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.17:*:*:*:*:*:*:*","matchCriteriaId":"EC0D745D-6B90-4A11-A51D-34CEE91BA4F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.18:*:*:*:*:*:*:*","matchCriteriaId":"4F73FC80-FB3C-4AEA-BB27-961CD378B1B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.19:*:*:*:*:*:*:*","matchCriteriaId":"D336C05B-D7AF-4B73-82D2-47766992F6CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.20:*:*:*:*:*:*:*","matchCriteriaId":"B78E87B1-4879-42AE-9B98-9AA176C8ECC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.21:*:*:*:*:*:*:*","matchCriteriaId":"992D4C59-7A6E-4029-8F1C-54F8F659248D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.22:*:*:*:*:*:*:*","matchCriteriaId":"E2D921A6-7523-4856-86A4-00EE58BE8F88"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.23:*:*:*:*:*:*:*","matchCriteriaId":"20D9B608-11DF-4F1A-B41B-80C668397F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.24:*:*:*:*:*:*:*","matchCriteriaId":"2F3E139E-19F6-4E67-9D3A-0D8CF5C6581D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.25:*:*:*:*:*:*:*","matchCriteriaId":"FABB9D9A-421F-4BC5-BCF4-A385BCCE4E68"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.26:*:*:*:*:*:*:*","matchCriteriaId":"ABC7A055-41A2-479E-8D6D-8D2E841ED426"},{"vulnerable":true,"criteria":"cpe:2.3:a:pango:pango:1.27:*:*:*:*:*:*:*","matchCriteriaId":"CECD345E-EA17-4D8A-A7E9-1E8041D43A94"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html","source":"secalert@redhat.com"},{"url":"http://openwall.com/lists/oss-security/2011/01/18/6","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2011/01/20/2","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://osvdb.org/70596","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/42934","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/43100","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0180.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/45842","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1024994","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2011/0186","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0238","source":"secalert@redhat.com"},{"url":"https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=639882","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=671122","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64832","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openwall.com/lists/oss-security/2011/01/18/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://openwall.com/lists/oss-security/2011/01/20/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://osvdb.org/70596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/42934","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/43100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-0180.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/45842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1024994","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2011/0186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0238","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/pango1.0/+bug/696616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=639882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=671122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/64832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-1908","sourceIdentifier":"cve@mitre.org","published":"2011-06-24T20:55:03.637","lastModified":"2026-06-16T23:30:21.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the Type 1 font decoder in the FreeType engine in Foxit Reader before 4.0.0.0619 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font in a PDF document."},{"lang":"es","value":"Desbordamiento de entero en el decodificador de tipo de letra 1 en el motor de FreeType en Foxit Reader antes de v4.0.0.0619 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (por caída de la aplicación) a través de una fuente modificada a mano en un documento PDF."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"074FDC0B-D869-49E0-8C3A-5EE60EE1B4F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:2.0:*:*:*:*:*:*:*","matchCriteriaId":"42134F7D-ED60-4815-BADD-542BBEFE7A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:2.2:*:*:*:*:*:*:*","matchCriteriaId":"67A1AA94-407E-421E-8BFE-4C0FBB9CD0E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:2.3:*:*:*:*:*:*:*","matchCriteriaId":"C133A953-B2F9-4168-8E00-91254ADC5C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.0:*:*:*:*:*:*:*","matchCriteriaId":"30CB7169-357B-42FB-B680-044883A8D9D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.1:*:*:*:*:*:*:*","matchCriteriaId":"3D320800-BAF5-4416-99F9-F5C8DD354417"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F980AD47-6BB0-41AC-973B-FE381716C2E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4E02A8F6-A463-46B2-AF3E-52AF2E9EE01C"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"073FCF5A-AF7B-4606-A5E4-91D54DE6A768"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.2:*:*:*:*:*:*:*","matchCriteriaId":"BA5A1265-645F-4D96-ADFC-B002E3C146D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CA86005-2300-470F-8029-097955B2D715"},{"vulnerable":true,"criteria":"cpe:2.3:a:foxitsoftware:foxit_reader:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"47DE0BE7-6C7D-4CF6-A950-390B4E0B3980"}]}]}],"references":[{"url":"http://www.foxitsoftware.com/products/reader/security_bulletins.php#freetype","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/msvr11-005.mspx","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/48359","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68145","source":"cve@mitre.org"},{"url":"http://www.foxitsoftware.com/products/reader/security_bulletins.php#freetype","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.microsoft.com/technet/security/advisory/msvr11-005.mspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/48359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-0226","sourceIdentifier":"product-security@apple.com","published":"2011-07-19T22:55:00.820","lastModified":"2026-06-16T23:27:02.637","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011."},{"lang":"es","value":"Error de entero sin signo en psaux/t1decode.c en FreeType anterior a v2.4.6, es usado enCoreGraphics en Apple iOS anterior a v4.2.9 y v4.3.x anterior a v4.3.4 y otros productos, permite a atacantes remotos ejecutar código de su elección o provocar una denegación de servicio (corrupción de memoria o caída de la aplicación) a través de una fuente manipulada Type 1 en un documento PDF, como se explotó en Julio 2011."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.5","matchCriteriaId":"22668317-72EF-41B9-9379-1AEC251C5F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"7B4450B4-B21F-4153-B9DD-C36A2381F00D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.8","matchCriteriaId":"20E87ED9-A08D-48B2-83A8-AD2C0F6A22A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E28FB0CB-D636-4F85-B5F7-70EC30053925"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"27319629-171F-42AA-A95F-2D71F78097D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"297F9438-0F04-4128-94A8-A504B600929E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"F8618621-F871-4531-9F6C-7D60F2BF8B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"824DED2D-FA1D-46FC-8252-6E25546DAE29"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1641DDFA-3BF1-467F-8EC3-98114FF9F07B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DF40CDA4-4716-4815-9ED0-093FE266734C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3D06D54D-97FD-49FD-B251-CC86FBA68CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*","matchCriteriaId":"25A5D868-0016-44AB-80E6-E5DF91F15455"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*","matchCriteriaId":"B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*","matchCriteriaId":"863383DA-0BC6-4A96-835A-A96128EC0202"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*","matchCriteriaId":"51D3BE2B-5A01-4AD4-A436-0056B50A535D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9A20F171-79FE-43B9-8309-B18341639FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"126EF22D-29BC-4366-97BC-B261311E6251"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*","matchCriteriaId":"3B3DD7B3-DA4C-4B0A-A94E-6BF66B358B7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3A939B80-0AD0-48AF-81A7-370716F56639"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D28528CE-4943-4F82-80C0-A629DA3E6702"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*","matchCriteriaId":"12E22AF0-2B66-425A-A1EE-4F0E3B0433E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB34ECBE-33E8-40E1-936B-7800D2525AE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"107C59BE-D8CF-4A17-8DFB-BED2AB12388D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*","matchCriteriaId":"36C86BB9-0328-4E34-BC2B-47B3471EC262"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.2:*:*:*:*:*:*:*","matchCriteriaId":"1878949F-8E15-4751-8D8A-BFB2B9B9254A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A54A8681-2D8A-4B0B-A947-82F3CE1FB03C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E0070D83-2E27-4DA8-8D10-A6A697216F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7252935C-E421-4339-B61F-0299E28888DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9DD342BF-096A-4082-B700-19629F2BDE87"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"93141AB6-26F2-4C6D-95B3-D383EABB4034"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"4D5C61FF-7CD3-410A-94F2-5DE701466B1F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","source":"product-security@apple.com"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html","source":"product-security@apple.com"},{"url":"http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html","source":"product-security@apple.com"},{"url":"http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html","source":"product-security@apple.com"},{"url":"http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html","source":"product-security@apple.com"},{"url":"http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html","source":"product-security@apple.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html","source":"product-security@apple.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html","source":"product-security@apple.com"},{"url":"http://secunia.com/advisories/45167","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/45224","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4802","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4803","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT5002","source":"product-security@apple.com"},{"url":"http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html","source":"product-security@apple.com"},{"url":"http://www.debian.org/security/2011/dsa-2294","source":"product-security@apple.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:120","source":"product-security@apple.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1085.html","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/48619","source":"product-security@apple.com"},{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/45167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/45224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT5002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2011/dsa-2294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/48619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-2895","sourceIdentifier":"secalert@redhat.com","published":"2011-08-19T17:55:03.037","lastModified":"2026-06-16T23:32:12.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896."},{"lang":"es","value":"El descompresor en LZW en (1) la función BufCompressedFill en fontfile/decompress.c en X.Org libXfont antes de la versión v1.4.4 y (2) compress/compress.c en 4.3BSD, tal y como se utiliza en zopen.c en OpenBSD antes de la versión v3.8, FreeBSD, NetBSD, FreeType v2.1.9, y otros productos, no controla correctamente las palabras de código ausentes de la tabla de descompresión, lo que permite provocar un bucle infinito o un desbordamiento de búfer basado en memoria dinámica (heap) a atacantes (dependiendo del contexto) y posiblemente ejecutar código de su elección a través de un flujo comprimido debidamente modificado. Se trata de un problema relacionado con los CVE-2006-1168 y CVE-2011 2896."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.3","matchCriteriaId":"366E84EE-4BAC-4816-B04A-7B60F70B0084"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"45A7B86F-A74E-42D8-BBE6-D86C4EB672B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"9806D538-0672-4D27-9A32-F41BB53DF738"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"29297813-F2F4-48BF-8DEA-DC83E44D154E"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"C1437F3D-127E-45E7-B678-85BF208BAD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"26743145-32B4-45A6-8912-2B97EF59B677"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1C18E74E-DB01-4D5F-BD18-DE370BA56A38"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"06DBC61A-10CD-41ED-AC1B-16C867823059"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"061E16E4-0DD2-45B0-927D-5E6D97D54D9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"58F3B17A-D8A9-4581-8EAC-4D6498A23F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"D064C118-DC51-46CF-961E-3D70C1EEFC92"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D9F45C46-F416-46FC-8C98-79D57BB397D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B21FE78A-41E1-46A7-8129-94CBA34A3FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"5ADFF46D-9680-410C-B8B8-79F629534465"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D36FBB2E-7BCD-4212-AE04-8C7C6B57CD49"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"8A603E28-7D58-44FB-819E-5F22FA9860EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2D9EE6A0-89DC-464D-890F-2C0E5CDCFAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B056FDAB-4B10-4B32-A942-84864D39CBD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:x:libxfont:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"642C350E-C81B-46F7-84B4-D3DE45E70DC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","matchCriteriaId":"D9EC02F3-3905-460D-8949-3B26394215CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"B55E4B92-88E0-41F0-AFA7-046A8D34A2CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"3.7","matchCriteriaId":"29DC69AE-D8BB-410B-B911-BFEA95774C3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5CB726CF-ADA2-4CDA-9786-1E84AC53740A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC373FC-88AC-4B6D-A289-51881ACD57F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D2DA7F0-E3C0-447A-A2B0-ECC928389D84"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FEBE290B-5EC6-4BBA-B645-294C150E417A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0DF053A1-C252-427E-9EEF-27240F422976"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"48A9C344-45AA-47B9-B35A-1A62E220D9C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"80EB24F0-46A7-481B-83ED-8BB012AE0C8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AA6AEAF0-FA61-4A3F-A083-1218C2027781"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*","matchCriteriaId":"D4D84D7A-EB7C-4196-B8B6-7B703C8055C2"}]}]}],"references":[{"url":"http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=d11ee5886e9d9ec610051a206b135a4cdc1e09a0","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-007.txt.asc","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/May/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html","source":"secalert@redhat.com"},{"url":"http://lists.freedesktop.org/archives/xorg-announce/2011-August/001721.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.freedesktop.org/archives/xorg-announce/2011-August/001722.html","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00019.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/45544","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/45568","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/45599","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/45986","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/46127","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1025920","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5130","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5281","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2011/dsa-2293","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:153","source":"secalert@redhat.com"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/compress/zopen.c#rev1.17","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2011/08/10/10","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1154.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1155.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1161.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1834.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/49124","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1191-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=725760","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=727624","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69141","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT205635","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT205637","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT205640","source":"secalert@redhat.com"},{"url":"https://support.apple.com/HT205641","source":"secalert@redhat.com"},{"url":"http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=d11ee5886e9d9ec610051a206b135a4cdc1e09a0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2011-007.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2012/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.freedesktop.org/archives/xorg-announce/2011-August/001721.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.freedesktop.org/archives/xorg-announce/2011-August/001722.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/45544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/45568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/45599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/45986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/46127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1025920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2011/dsa-2293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/compress/zopen.c#rev1.17","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2011/08/10/10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1154.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1155.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1161.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2011-1834.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/49124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1191-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=725760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=727624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/69141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT205641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-3256","sourceIdentifier":"product-security@apple.com","published":"2011-10-14T10:55:10.090","lastModified":"2026-06-16T23:32:58.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226."},{"lang":"es","value":"FreeType versión 2 anterior a 2.4.7, como es usado en CoreGraphics en iOS de Apple anterior a versión 5, Mandriva Enterprise Server versión 5, y posiblemente otros productos, permite a los atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) por medio de una fuente diseñada, una vulnerabilidad diferente de CVE-2011-0226."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.0:-:iphone:*:*:*:*:*","matchCriteriaId":"A066B59B-D5C8-4AA8-9CC7-5D34F4AB88AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*","matchCriteriaId":"51D3BE2B-5A01-4AD4-A436-0056B50A535D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1:-:iphone:*:*:*:*:*","matchCriteriaId":"E357722F-4976-4E47-BFB5-709480BAE267"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"F43A6FEC-ECA9-44A4-AD00-FDC6F3990DC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1.2:-:iphone:*:*:*:*:*","matchCriteriaId":"7CA92907-90C9-4BD6-8EE8-8FA6298C3D0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.1.3:-:iphone:*:*:*:*:*","matchCriteriaId":"220590DA-2B6A-4FC9-B456-3053EED9D96E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2:-:iphone:*:*:*:*:*","matchCriteriaId":"3FE3CDE8-6497-445E-A845-8A1C2A4EDEB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"9E4D3134-28BC-4C30-A9B0-559338FBBDFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3A939B80-0AD0-48AF-81A7-370716F56639"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2.1:-:ipad:*:*:*:*:*","matchCriteriaId":"98C41674-370B-4CF0-817B-3843D93A10DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D28528CE-4943-4F82-80C0-A629DA3E6702"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*","matchCriteriaId":"12E22AF0-2B66-425A-A1EE-4F0E3B0433E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0:-:iphone:*:*:*:*:*","matchCriteriaId":"954CDDCB-AC22-448D-8ECA-CFA4DBA1BC27"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"54FECD66-4216-43FC-9959-B8EA9545449C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB34ECBE-33E8-40E1-936B-7800D2525AE6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0.1:-:iphone:*:*:*:*:*","matchCriteriaId":"ECE983F6-A597-4581-A254-80396B54F2D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0.1:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"586C0CB3-98E5-4CB3-8F23-27F01233D6C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"107C59BE-D8CF-4A17-8DFB-BED2AB12388D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*","matchCriteriaId":"36C86BB9-0328-4E34-BC2B-47B3471EC262"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A54A8681-2D8A-4B0B-A947-82F3CE1FB03C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E0070D83-2E27-4DA8-8D10-A6A697216F36"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:*","matchCriteriaId":"8C9ACA63-4528-4090-B1EA-1FE57A6B0555"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7252935C-E421-4339-B61F-0299E28888DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"9DD342BF-096A-4082-B700-19629F2BDE87"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"93141AB6-26F2-4C6D-95B3-D383EABB4034"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"4D5C61FF-7CD3-410A-94F2-5DE701466B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"28A01C87-B02A-4239-8340-B396D0E6B21C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.3.5:-:ipad:*:*:*:*:*","matchCriteriaId":"396634C5-774C-4131-B927-3CAD239EF0B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:4.3.5:-:ipodtouch:*:*:*:*:*","matchCriteriaId":"64FF0F29-B3C2-4BDC-89FF-DBEDE87D64A4"}]}]}],"references":[{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","source":"product-security@apple.com"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069100.html","source":"product-security@apple.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00008.html","source":"product-security@apple.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00003.html","source":"product-security@apple.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00012.html","source":"product-security@apple.com"},{"url":"http://secunia.com/advisories/48951","source":"product-security@apple.com"},{"url":"http://support.apple.com/kb/HT4999","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT5130","source":"product-security@apple.com"},{"url":"http://www.debian.org/security/2011/dsa-2328","source":"product-security@apple.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:157","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/50155","source":"product-security@apple.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/70552","source":"product-security@apple.com"},{"url":"https://sourceforge.net/projects/freetype/files/freetype2/2.4.7/README/view","source":"product-security@apple.com"},{"url":"http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069100.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT4999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT5130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2011/dsa-2328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2011:157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/50155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/70552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/projects/freetype/files/freetype2/2.4.7/README/view","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-3439","sourceIdentifier":"product-security@apple.com","published":"2011-11-11T18:55:01.193","lastModified":"2026-06-16T23:33:17.570","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document."},{"lang":"es","value":"FreeType en CoreGraphics en Apple iOS anterior a v5.0.1 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) a través de una fuente manipulada en un documento."}],"affected":[{"source":"product-security@apple.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*","versionEndExcluding":"5.0.1","matchCriteriaId":"81280D9A-E4E0-4A71-A1E4-532005EDAC5F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*","matchCriteriaId":"60FBDD82-691C-4D9D-B71B-F9AFF6931B53"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:-:*:*","matchCriteriaId":"A44C3422-0D42-473E-ABB4-279D7494EE2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:vmware:*:*","matchCriteriaId":"A6B7CDCA-6F39-4113-B5D3-3AA9D7F3D809"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp1:*:*:*:*:*:*","matchCriteriaId":"E8C91701-DF37-4F7B-AB9A-B1BFDB4991F8"}]}]}],"references":[{"url":"http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00008.html","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00003.html","source":"product-security@apple.com","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00012.html","source":"product-security@apple.com","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/46921","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"product-security@apple.com","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT5052","source":"product-security@apple.com","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/46921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT5052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2012-1126","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:17.933","lastModified":"2026-06-16T23:39:04.587","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a BDF font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de lectura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de datos de la propiedad modificados en una fuente BDF."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800581","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1127","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:17.997","lastModified":"2026-06-16T23:39:04.740","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de lectura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de datos modificados del glifo o mapa de imagen en una fuente BDF."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800583","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1128","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.057","lastModified":"2026-06-16T23:39:04.897","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and memory corruption) or possibly execute arbitrary code via a crafted TrueType font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (desreferencia de puntero nulo y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de una fuente TrueType modificada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800584","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800584","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1129","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.090","lastModified":"2026-06-16T23:39:05.037","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted SFNT string in a Type 42 font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de una cadena SFNT modificada en una fuente Type 42."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800585","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800585","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1130","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.137","lastModified":"2026-06-16T23:39:05.190","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted property data in a PCF font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de datos de las propiedades modificadas en una fuente PCF.."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800587","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1131","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.183","lastModified":"2026-06-16T23:39:05.350","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors related to the cell table of a font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, en plataformas de 64 bits, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de vectores relacionados con la celda de una tabla de una fuente."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800589","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800589","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1132","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.213","lastModified":"2026-06-16T23:39:05.507","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via crafted dictionary data in a Type 1 font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de datos modificados del diccionario en una fuente Type 1."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800590","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800590","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1133","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.260","lastModified":"2026-06-16T23:39:05.663","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de de un glifo o datos del mapa de imagen modificados en una fuente BDF."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48300","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2428","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800591","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800591","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1134","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.307","lastModified":"2026-06-16T23:39:05.823","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted private-dictionary data in a Type 1 font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de datos modificados del diccionario privado en una fuente Type 1."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48300","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2428","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800592","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1135","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.370","lastModified":"2026-06-16T23:39:05.987","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the NPUSHB and NPUSHW instructions in a TrueType font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de vectores que incluyen instrucciones NPUSHB y NPUSHW en una fuente TrueType."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800593","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800593","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1136","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.417","lastModified":"2026-06-16T23:39:06.133","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph or bitmap data in a BDF font that lacks an ENCODING field."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través del glifo modificado o datos del mapa de bits en una fuente BDF que carece de campo ENCODING."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48300","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2428","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800594","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1137","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.480","lastModified":"2026-06-16T23:39:06.300","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted header in a BDF font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de una cabecera modificada en una fuente BDF."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800595","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1138","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.527","lastModified":"2026-06-16T23:39:06.450","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via vectors involving the MIRP instruction in a TrueType font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de vectores que implican una instrucción MIRP en una fuente TrueType."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800597","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800597","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1139","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.557","lastModified":"2026-06-16T23:39:06.607","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid stack read operation and memory corruption) or possibly execute arbitrary code via crafted glyph data in a BDF font."},{"lang":"es","value":"Error de índice de matriz en FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través del glifo modificado de una fuente BDF."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800598","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1140","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.607","lastModified":"2026-06-16T23:39:06.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted PostScript font object."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de un objeto de fuente PostScript modificado."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800600","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1141","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.650","lastModified":"2026-06-16T23:39:06.910","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap read operation and memory corruption) or possibly execute arbitrary code via a crafted ASCII string in a BDF font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través una cadena ASCII modificada en una fuente BDF."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800602","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1142","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.683","lastModified":"2026-06-16T23:39:07.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via crafted glyph-outline data in a font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través del perfil modificado del glifo de una fuente."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48300","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2428","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800604","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1143","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.730","lastModified":"2026-06-16T23:39:07.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (error de división por cero) a través de una fuente TrueType modificada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48797","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48918","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48951","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800606","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48951","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-1144","sourceIdentifier":"secalert@redhat.com","published":"2012-04-25T10:10:18.777","lastModified":"2026-06-16T23:39:07.397","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service (invalid heap write operation and memory corruption) or possibly execute arbitrary code via a crafted TrueType font."},{"lang":"es","value":"FreeType antes de v2.4.9, tal como se utiliza en Mozilla Firefox Mobile antes de v10.0.4 y otros productos, permite a atacantes remotos causar una denegación de servicio (operación no válida de escritura y corrupción de memoria) o posiblemente ejecutar código arbitrario a través de una fuente TrueType modificada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.8","matchCriteriaId":"1AE5852E-FBD0-4F23-82C0-4E8FBDDF558B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:*:*:*","versionEndIncluding":"10.0.3","matchCriteriaId":"C25B56F0-B244-4D64-BC8F-341214080A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B00C6411-5566-4060-B68B-8F1674B9E280"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:*:*:*:*:*:*:*","matchCriteriaId":"CD9C4A1A-E3C7-40DD-AF51-AFFA0D904722"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B6A0EDF9-2260-439F-9CF0-A66CBE35ACF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"6E55723B-B7B8-4EBF-8767-55988D26E82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"761B33B6-4FFD-4E6C-92B4-2186F8D195C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8E4E272B-27F1-41CE-8B60-B1C098105A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:5.0:*:*:*:*:*:*:*","matchCriteriaId":"907FA1DF-E3D3-4E46-B353-753E70C292CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0:*:*:*:*:*:*:*","matchCriteriaId":"97DE5B71-865A-4DB0-A31A-1CA75A5AB7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B64C7CE2-6BA7-4294-80CF-3AE25EE9529B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"640595E6-3E39-4112-887E-174C86D18630"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8E26E8D7-334C-4260-A8EE-82DF067CC081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:8.0:*:*:*:*:*:*:*","matchCriteriaId":"643623BB-29E4-4138-AFC6-252368FC9495"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:9.0:*:*:*:*:*:*:*","matchCriteriaId":"9CEA838D-5FE6-47A7-8367-F040FF01B681"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0:*:*:*:*:*:*:*","matchCriteriaId":"BF547E94-BEC4-4D32-A2AF-AFEBFE11782A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB1307C-64E4-4EC2-BB07-012107CA5DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox_mobile:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"91C9D50D-9450-489C-8336-4332F8FD6806"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48300","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48508","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48758","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48822","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/48973","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"secalert@redhat.com"},{"url":"http://support.apple.com/kb/HT5503","source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2012/dsa-2428","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"secalert@redhat.com"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/52318","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1026765","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"secalert@redhat.com"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800607","source":"secalert@redhat.com"},{"url":"http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0467.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/48973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201204-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT5503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2012/dsa-2428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2012:057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/06/16","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/52318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1026765","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1403-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=733512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=800607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-4190","sourceIdentifier":"cve@mitre.org","published":"2012-10-12T10:44:20.210","lastModified":"2026-06-16T23:44:34.140","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The FT2FontEntry::CreateFontEntry function in FreeType, as used in the Android build of Mozilla Firefox before 16.0.1 on CyanogenMod 10, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors."},{"lang":"es","value":"La función FT2FontEntry::CreateFontEntry en FreeType, como la usada por Android en Mozilla Firefox anteriores a v16.0.1 en CyanogenMod 10, permite a atacantes remotos provocar la denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente ejecutar código a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"16.0","matchCriteriaId":"C44B635E-9F01-4F78-A08D-57DE34010A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C7AA88B-638A-451A-B235-A1A1444BE417"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9C01AD7C-8470-47AB-B8AE-670E3A381E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7E43F2F1-9252-4B44-8A61-D05305915A5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3BB9D48B-DC7B-4D92-BB26-B6DE629A2506"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*","matchCriteriaId":"A360D595-A829-4DDE-932E-9995626917E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6E9B5349-FAA7-4CDA-9533-1AD1ACDFAC4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"07243837-C353-4C25-A5B1-4DA32807E97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*","matchCriteriaId":"B832C034-F793-415F-BFC8-D97A18BA6BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"83CD1A13-66CB-49CC-BD84-5D8334DB774A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*","matchCriteriaId":"438AACF8-006F-4522-853F-30DBBABD8C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"778FAE0C-A5CF-4B67-93A9-1A803E3E699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E7447185-7509-449D-8907-F30A42CF7EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0EDBAC37-9D08-44D1-B279-BC6ACF126CAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3FFF89FA-2020-43CC-BACD-D66117B3DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"834BB391-5EB5-43A8-980A-D305EDAE6FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9A38AD88-BAA6-4FBE-885B-69E951BD1EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B500EE6C-99DB-49A3-A1F1-AFFD7FE28068"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4F2938F2-A801-45E5-8E06-BE03DE03C8A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F18A45C0-419C-4723-AB7D-5880EF668CE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABB88E86-6E83-4A59-9266-8B98AA91774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"E19ED1CA-DEBD-4786-BA7B-C122C7D2E5B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*","matchCriteriaId":"66BE50FE-EA21-4633-A181-CD35196DF06E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"84D15CE0-69DF-4EFD-801E-96A4D6AABEDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CEE203DE-6C0E-4FDE-9C3A-0E73430F17DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F2F38886-C25A-4C6B-93E7-36461405BA99"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C65D2670-F37F-48CB-804A-D35BB1C27D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"DE8E5194-7B34-4802-BDA6-6A86EB5EDE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FABA5F56-99F7-4F8F-9CC1-5B0B2EB72922"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"2917BD67-CE81-4B94-B241-D4A9DDA60319"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"A524A94E-F19B-42B9-AA8E-171751C339AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F71436CF-F756-44E0-8E69-6951F6B3E54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"582EE839-B83F-4908-9780-D0C92DC44FD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"824369CF-00A0-434E-94BC-71CA1317012C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB35099-B04E-4796-A25D-953329FE62F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5DBEBCFD-80D6-466A-BAEF-C75E65A3B12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C30ACBCA-4FA1-46DE-8F15-4830BC27E160"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"9453EF65-7C69-449E-BF7C-4FECFB56713E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"4AA75825-21CF-475B-8040-126A13FA2216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA97C80E-17FA-4866-86CE-29886145ED80"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*","matchCriteriaId":"7DE24BED-202E-416D-B5F2-8207D97B9939"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"04198E04-CE1D-4A5A-A20C-D1E135B45F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*","matchCriteriaId":"717DB967-F658-4699-A224-5B261BFEC10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3487FA64-BE04-42CA-861E-3DAC097D7D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F3D956DC-C73B-439F-8D79-8239207CC76F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57E2C7E7-56C0-466C-BB08-5EB43922C4F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"462E135A-5616-46CC-A9C0-5A7A0526ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6121F9C1-F4DF-4AAB-9E51-AC1592AA5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"58D44634-A0B5-4F05-8983-B08D392EC742"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3AC3D3-FDD7-489F-BDCF-BDB55DF33A8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"4105171B-9C90-4ABF-B220-A35E7BA9EE40"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*","matchCriteriaId":"20985549-DB24-4B69-9D40-208A47AE658E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"43A13026-416F-4308-8A1B-E989BD769E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*","matchCriteriaId":"612B015E-9F96-4CE6-83E4-23848FD609E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"1E391619-0967-43E1-8CBC-4D54F72A85C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0544D626-E269-4677-9B05-7DAB23BD103B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*","matchCriteriaId":"C95F7B2C-80FC-4DF2-9680-F74634DCE3E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*","matchCriteriaId":"863C140E-DC15-4A88-AB8A-8AEF9F4B8164"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*","matchCriteriaId":"38CD049A-5333-4FF7-AD34-6B74E19BADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0066576D-D66A-4B59-B5C3-471EEBEE8B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"60ED6DAA-9194-4829-BC1A-00F04BE7930A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*","matchCriteriaId":"13BEB9A6-EFD5-4793-9603-84DB84F1CF7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*","matchCriteriaId":"461163C6-4CA8-4BA9-95A1-136E612CBA6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*","matchCriteriaId":"275E9D96-1290-44AB-BF9B-E9E4A803F593"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*","matchCriteriaId":"412DF091-7604-4110-87A0-3488116A97E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11E07FED-ABDB-4B0A-AB2E-4CBF1EAC4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9A6558F1-9E0D-4107-909A-8EF4BC8A9C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"63DF3D65-C992-44CF-89B4-893526C6242E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9024117-2E8B-4240-9E21-CC501F3879B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"FBC3CAD3-2F54-4E32-A0C9-0D826C45AC23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"52624B41-AB34-40AD-8709-D9646B618AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"917E9856-9556-4FD6-A834-858F8837A6B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*","matchCriteriaId":"98BBD74D-930C-4D80-A91B-0D61347BAA63"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"FAF2E696-883D-4DE5-8B79-D8E5D9470253"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"94E04FD9-38E8-462D-82C2-729F7F7F0465"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5888517E-3C57-4A0A-9895-EA4BCB0A0ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"0BB21291-B9F3-445E-A9E9-EA1822083DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"D595F649-ECBE-45E0-8AAD-BCBC65A654B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4FE6E920-9A4C-431B-89EA-683A22F15ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"18B6CC9F-6295-4598-B28B-0CA19D1D9F45"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*","matchCriteriaId":"C9F0434D-C84F-49FD-9F44-66D3ACD7B601"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*","matchCriteriaId":"F6AAB416-E865-4EEE-8FCB-A91253BEB52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*","matchCriteriaId":"76CD3BDF-A079-4EF3-ABDE-43CBDD08DB1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"031E8624-5161-43AF-AF19-6BAB5A94FDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"54186D4A-C6F0-44AD-94FB-73B4346ABB6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"47E50AD9-BA35-4817-BD4D-5D678FC5A3C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DD09DE40-8C9B-41EA-B372-9E4E4830E8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"F223FB83-0EDB-4429-94B9-1AEEF314B73F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"BC6B977F-292F-4981-95A0-6065A3C487D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"342226B9-2C0C-416C-81FE-19C49F03AA88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.8:*:*:*:*:*:*:*","matchCriteriaId":"2A6A28E0-F67A-4275-B0D9-A02822E9EF7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.9:*:*:*:*:*:*:*","matchCriteriaId":"ECAB4696-76F3-458C-B33B-D7F8690C60A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.10:*:*:*:*:*:*:*","matchCriteriaId":"BBB444FD-15F3-4447-9EA8-1669779A5749"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.11:*:*:*:*:*:*:*","matchCriteriaId":"F92E2EF3-A612-476F-9D31-1EEC240C7EA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.12:*:*:*:*:*:*:*","matchCriteriaId":"0F175D30-2416-4172-BF11-DA78D252D608"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.13:*:*:*:*:*:*:*","matchCriteriaId":"5DD3F168-3EF4-492E-BBAA-EACB1357C709"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.14:*:*:*:*:*:*:*","matchCriteriaId":"4B46BA97-2860-45E4-9FD3-F418A202E4F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.5.15:*:*:*:*:*:*:*","matchCriteriaId":"B1C23289-38C3-4C62-8B27-249EAECC297E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*","matchCriteriaId":"F3782354-7EB7-49D2-B240-1871F6CB84C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"30D47263-03AD-4060-91E3-90F997B3D174"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"AFD775DF-277E-4D5B-B980-B8E6E782467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C8587BFD-417D-42BE-A5F8-22FDC68FA9E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"D7364FAB-EEE9-4064-A8AD-6547239F9AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.7:*:*:*:*:*:*:*","matchCriteriaId":"4C50485F-BC7B-4B70-A47B-1712E2DBAC5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.8:*:*:*:*:*:*:*","matchCriteriaId":"51EE386B-0833-484E-A2AB-86B4470D4D45"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.9:*:*:*:*:*:*:*","matchCriteriaId":"C3EF1B4D-6556-4B3C-BDD0-6348A4D4A91D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.10:*:*:*:*:*:*:*","matchCriteriaId":"68C5C7CF-005B-42FC-B950-90303F0CC115"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.11:*:*:*:*:*:*:*","matchCriteriaId":"0B2FA2CF-7FE4-43B1-96A0-C14666EDBD7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.12:*:*:*:*:*:*:*","matchCriteriaId":"30290F6D-55CA-47EB-8F41-7BBB745C7A34"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.13:*:*:*:*:*:*:*","matchCriteriaId":"F61F0607-14B0-49AD-B7E6-C4D75401C270"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.14:*:*:*:*:*:*:*","matchCriteriaId":"7FED863D-2898-4148-A9FB-73BFF9DE4396"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.15:*:*:*:*:*:*:*","matchCriteriaId":"779C1245-A6F9-41F5-B8D4-FAE506A23FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.16:*:*:*:*:*:*:*","matchCriteriaId":"9E7CFEE9-70D4-465F-9FB9-397E6B200FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.17:*:*:*:*:*:*:*","matchCriteriaId":"197E56BF-BE78-459F-A124-786DF39D1235"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.18:*:*:*:*:*:*:*","matchCriteriaId":"07747612-3890-4271-94A4-4347E5ED073D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.19:*:*:*:*:*:*:*","matchCriteriaId":"0855BA85-BC52-4EDF-915A-8B4E5FB48092"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.20:*:*:*:*:*:*:*","matchCriteriaId":"BC273819-9DDE-4591-9376-1DD5782461F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.21:*:*:*:*:*:*:*","matchCriteriaId":"9B68D1E7-B2F7-4581-8173-8CCF55A0E1BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.22:*:*:*:*:*:*:*","matchCriteriaId":"CDFF6453-B707-4772-8CDF-2F8922FD4894"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.23:*:*:*:*:*:*:*","matchCriteriaId":"C4D70DBF-1CF2-491D-BA0F-478D7732E01C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.24:*:*:*:*:*:*:*","matchCriteriaId":"0B55ADF9-6525-4EFA-A431-CD69C8C2216C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:3.6.25:*:*:*:*:*:*:*","matchCriteriaId":"B40A42AD-7097-47F8-9A3F-1806D8C174F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C69962C4-FA56-47F2-82A4-DFF4C19DAF3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:beta1:*:*:*:*:*:*","matchCriteriaId":"B7BC1684-3634-4585-B7E6-8C8777E1DA0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:beta10:*:*:*:*:*:*","matchCriteriaId":"A490D040-EF74-45C2-89ED-D88ADD222712"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:beta11:*:*:*:*:*:*","matchCriteriaId":"6CDA17D1-CD93-401E-860C-7C3291FEEB7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:beta12:*:*:*:*:*:*","matchCriteriaId":"6F72FDE3-54E0-48E4-9015-1B8A36DB1EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:beta2:*:*:*:*:*:*","matchCriteriaId":"4062C901-3828-415B-A6C3-EDD0E7B20C0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:beta3:*:*:*:*:*:*","matchCriteriaId":"CC0D8730-7034-4AD6-9B05-F8BAFB0145EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:beta4:*:*:*:*:*:*","matchCriteriaId":"857AFB05-F0C1-4061-9680-9561D68C908F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:beta5:*:*:*:*:*:*","matchCriteriaId":"EC37EBAF-C979-4ACC-ACA9-BDC2AECCB0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:beta6:*:*:*:*:*:*","matchCriteriaId":"80801CD8-EEAF-4BC4-9085-DCCC6CF73076"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:beta7:*:*:*:*:*:*","matchCriteriaId":"FAF4C78A-5093-4871-AF69-A8E8FD7E1AAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:beta8:*:*:*:*:*:*","matchCriteriaId":"560AD4C7-89D2-4323-BBCC-A89EEB6832CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0:beta9:*:*:*:*:*:*","matchCriteriaId":"6B389CBC-4F6C-4C17-A87B-A6DD92703A10"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DDFBA043-91BC-4FB5-A34D-FCE1A9C65A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8901A808-66F1-4501-AFF6-6FBB22852855"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B88D1373-6E41-4EF4-86A0-CE85EA3BF23E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1F42315C-35AF-4EDD-8B78-A9EDB9F85D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"62147F86-C2E6-4D55-9C72-F8BB430F2F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CE4D1FFD-3AFE-4F52-BCBE-A56609B2D7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:7.0:*:*:*:*:*:*:*","matchCriteriaId":"5B2CD349-B9BF-4752-B7B9-665BF718EDB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"11A8F675-A91F-4E41-AA2B-5214DF79C69C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:8.0:*:*:*:*:*:*:*","matchCriteriaId":"75B6A811-2B5A-484A-9878-C8E2C3E7633C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"456769EF-8961-4038-A7D5-B980147159E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:9.0:*:*:*:*:*:*:*","matchCriteriaId":"7439C998-E396-4EEC-9C21-E82D27459EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A1CD246C-1104-4DA1-9BFD-ED0B1FBA7EF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A1D4D8C9-5A00-46FE-9E42-CB8C2D66B120"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E639BCCB-A6BF-4174-BFAF-9674E65BA404"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FDFC5947-3C3D-4484-8803-D6629C63B315"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:11.0:*:*:*:*:*:*:*","matchCriteriaId":"9FEA6800-CBDB-497A-BBBE-1C40E8484A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:12.0:*:*:*:*:*:*:*","matchCriteriaId":"DF604D56-5D81-4276-88A1-AE321929E22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:12.0:beta6:*:*:*:*:*:*","matchCriteriaId":"AB630A94-DA1F-4A7F-891D-E6F242C20271"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:13.0:*:*:*:*:*:*:*","matchCriteriaId":"B038D136-BB5E-4252-B313-A13919195DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:13.0.1:*:*:*:*:*:*:*","matchCriteriaId":"10DC88D4-CEEF-4BD1-9D69-CC5EA0262932"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:14.0:*:*:*:*:*:*:*","matchCriteriaId":"C2841735-0EA5-472C-A7FA-385A5677F106"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:14.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5DB041C1-A5A3-4007-8633-FF018F88D5E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:15.0:*:*:*:*:*:*:*","matchCriteriaId":"37426FAE-A85D-4368-9E8E-186D98879BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:15.0.1:*:*:*:*:*:*:*","matchCriteriaId":"94187D6F-D4E0-4A9E-AD27-362923B6C8ED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cyanogenmod:cyanogenmod:10:*:*:*:*:*:*:*","matchCriteriaId":"9C9FF70D-9D9B-43F5-A57B-73D155D1C905"}]}]}],"references":[{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-88.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1027653","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=790139","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79208","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2012/mfsa2012-88.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1027653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=790139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/79208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-5668","sourceIdentifier":"secalert@redhat.com","published":"2013-01-24T21:55:01.163","lastModified":"2026-06-16T23:47:13.120","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to BDF fonts and the improper handling of an \"allocation error\" in the bdf_free_font function."},{"lang":"es","value":"FreeType anterior a v2.4.11, permite a atacantes dependientes del contexto provocar una denegación de servicio (Caída y deferencia a puntero nulo)  posiblemente la ejecución de código arbitrario a través de vectores relacionados con las fuentes BDF y un manejo incorrecto de una \"ubicación de error\" en la función bdf_free_font."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.10","matchCriteriaId":"246A62B7-B82F-44BD-B3D7-F6A474F76E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"52FA516A-918B-4727-8108-EE89FA5EB123"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"2DB966A5-4663-4133-84B8-F292125990DE"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9b6b5754b57c12b820e01305eb69b8863a161e5a","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/51826","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/51900","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.freetype.org/","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/12/25/2","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1027921","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.520186","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1686-1","source":"secalert@redhat.com"},{"url":"https://savannah.nongnu.org/bugs/?37905","source":"secalert@redhat.com"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9b6b5754b57c12b820e01305eb69b8863a161e5a","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/51826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/51900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.freetype.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/12/25/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1027921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.520186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1686-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://savannah.nongnu.org/bugs/?37905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-5669","sourceIdentifier":"secalert@redhat.com","published":"2013-01-24T21:55:01.227","lastModified":"2026-06-16T23:47:13.240","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read."},{"lang":"es","value":"La función _bdf_parse_glyphs en FreeType anterior a v2.4.11, permite a atacantes dependientes del contexto provocar una denegación de servicio (Caída) u posiblemente la ejecución de código arbitrario a través de vectores relacionados con las fuentes BDF y un cálculo incorrecto que provoca una lectura fuera de rango."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.10","matchCriteriaId":"246A62B7-B82F-44BD-B3D7-F6A474F76E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"52FA516A-918B-4727-8108-EE89FA5EB123"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"2DB966A5-4663-4133-84B8-F292125990DE"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=07bdb6e289c7954e2a533039dc93c1c136099d2d","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0216.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/51826","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/51900","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.freetype.org/","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/12/25/2","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1027921","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.520186","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1686-1","source":"secalert@redhat.com"},{"url":"https://savannah.nongnu.org/bugs/?37906","source":"secalert@redhat.com"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=07bdb6e289c7954e2a533039dc93c1c136099d2d","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0216.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/51826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/51900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.freetype.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/12/25/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1027921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.520186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1686-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://savannah.nongnu.org/bugs/?37906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2012-5670","sourceIdentifier":"secalert@redhat.com","published":"2013-01-24T21:55:01.273","lastModified":"2026-06-16T23:47:13.370","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) via vectors related to BDF fonts and an ENCODING field with a negative value."},{"lang":"es","value":"La función _bdf_parse_glyphs en FreeType antes v2.4.11 permite a atacantes dependientes de contexto provocar una denegación de servicio (fuera del terreno de juego de escritura y bloqueo) a través de vectores relacionados con las fuentes BDF y un campo de codificación con un valor negativo."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.10","matchCriteriaId":"246A62B7-B82F-44BD-B3D7-F6A474F76E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"52FA516A-918B-4727-8108-EE89FA5EB123"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"2DB966A5-4663-4133-84B8-F292125990DE"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7f2e4f4f553f6836be7683f66226afac3fa979b8","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html","source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/51826","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/51900","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.freetype.org/","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2012/12/25/2","source":"secalert@redhat.com"},{"url":"http://www.securitytracker.com/id?1027921","source":"secalert@redhat.com"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.520186","source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1686-1","source":"secalert@redhat.com"},{"url":"https://savannah.nongnu.org/bugs/?37907","source":"secalert@redhat.com"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7f2e4f4f553f6836be7683f66226afac3fa979b8","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/51826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/51900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.freetype.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2012/12/25/2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1027921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2013&m=slackware-security.520186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1686-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://savannah.nongnu.org/bugs/?37907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2013-1868","sourceIdentifier":"secalert@redhat.com","published":"2013-07-10T19:55:04.607","lastModified":"2026-06-16T23:52:16.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in VideoLAN VLC media player 2.0.4 and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to the (1) freetype renderer and (2) HTML subtitle parser."},{"lang":"es","value":"Múltiples desbordamientos de búfer en VideoLAN VLC media player v2.0.4 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) y ejecutar código arbitrario a través de vectores relacionados con el (1) procesador freetype  y (2) el analizador (parser) de subtitulos HTML."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.4","matchCriteriaId":"E5C76C9C-1161-49AA-8108-167DC868473D"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1928547F-4689-43CD-9C66-7097AE360669"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A3FD4FB1-A4E7-4712-B864-0F85D957E81D"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2A6AE8D3-46C9-441B-886C-63D9A28DB918"},{"vulnerable":true,"criteria":"cpe:2.3:a:videolan:vlc_media_player:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"99D5CFF3-0643-4AFD-B5D9-7C7C3B18C29B"}]}]}],"references":[{"url":"http://marc.info/?l=oss-security&m=136367945627336&w=2","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/59793","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/57079","source":"secalert@redhat.com"},{"url":"http://www.videolan.org/security/sa1301.html","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17226","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=oss-security&m=136367945627336&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/59793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/57079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.videolan.org/security/sa1301.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-2240","sourceIdentifier":"cve@mitre.org","published":"2014-03-12T14:55:30.773","lastModified":"2026-06-17T00:06:16.530","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the cf2_hintmap_build function in cff/cf2hints.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of stem hints in a font file."},{"lang":"es","value":"Desbordamiento de buffer basado en pila en la función cf2_hintmap_build en cff/cf2hints.c en FreeType anterior a 2.5.3 permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario a través de un número grande de \"stem hints\" en un fichero de fuentes."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.2","matchCriteriaId":"814C8BFE-8DD6-465A-8AF8-FBB3CDF2F6F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"888C3BB8-510B-4FBE-BA5D-0D488583C7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"3B67236B-7DEF-40AE-BC6F-12CB39329C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7EEC5D17-9141-4CA5-9D4C-76C15BAE4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F1019F69-8E42-43C9-926C-B948659666F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AA678E5E-9380-4D31-973F-018349F7F346"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5E06AD6E-8B77-4E57-AA07-507CD1F809F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8DB69925-10FB-4DFD-8764-B6640B88FCEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"98D0D1A3-886D-4EE3-AC1A-3B36D192E8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DB0B0E33-0D7D-45E9-ADFD-20C6DCB5ED64"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E76672-7216-443E-BBD8-120DA96F7E4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"369D87D8-E4A7-4EC4-B508-2940EE174F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"288FDB59-7FE4-4351-8822-554ADF07C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B681257A-F8D8-46D5-995D-BC44F54DD5C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"56E0DEB6-4414-49AB-88E9-988CE5D8EF67"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"56A90D08-2CAF-422F-8587-7D88EC7632A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"9B944FEB-F69D-4F6C-9485-26F95A5874B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*","matchCriteriaId":"B9B9B1DE-89F6-463D-A3F4-6366D5D30077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"5283E910-D512-481C-804E-8717A83B24CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F7252819-BA8A-4BD1-BAAA-179A8777C994"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"11575E3C-2BEA-4264-AE41-4A962BD17035"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F2B49505-C973-4673-A9BC-34ACA25059D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"8697D11D-BBDF-4722-85F7-5144A5D26E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"AB06CA25-BB25-43B8-9FC2-62C399CC52EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"214DC64B-BA35-486B-AE30-F2D9381E4D26"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*","matchCriteriaId":"DD8401A8-A328-49F6-BAE8-337F5F36C906"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3FBF5BAA-8027-478F-BE06-3D3F4F823C7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"31358B5D-4087-4207-9730-297BA47DAA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3A73E016-A4B0-416D-B9B6-786A787DAD3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"0588BCE1-059B-4602-B274-E9D268720B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D19BE9CC-6B1C-4AC8-9740-2ABDF40C4FEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F3E33C-95E0-4EEF-8E26-F7044D8C3892"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"0871F88D-3D36-4EAA-B2B4-39D844FF8874"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"B3396203-9BDF-4E7D-85CC-0B6AA7DC55C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"52FA516A-918B-4727-8108-EE89FA5EB123"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"2DB966A5-4663-4133-84B8-F292125990DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"12B89E2D-8F41-4A30-8E61-50E77BC7193C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"AAD2CC48-E73F-47E7-9E34-9459E2BBEF1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"87F27E60-83BF-4D03-9283-F5E487F4AD66"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.5:*:*:*:*:*:*:*","matchCriteriaId":"6D67BB0D-8A4B-44F2-8A0D-A4DA3C6A3B3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"648795F7-DA71-43AC-ADAF-9613F090F414"}]}]}],"references":[{"url":"http://savannah.nongnu.org/bugs/?41697","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/57291","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/57447","source":"cve@mitre.org"},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.5.3","source":"cve@mitre.org"},{"url":"http://www.freetype.org/index.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/66074","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1029895","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2148-1","source":"cve@mitre.org"},{"url":"http://savannah.nongnu.org/bugs/?41697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57291","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/57447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/projects/freetype/files/freetype2/2.5.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freetype.org/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/66074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1029895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2148-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-2241","sourceIdentifier":"cve@mitre.org","published":"2014-03-18T17:04:18.140","lastModified":"2026-06-17T00:06:16.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) cf2_initLocalRegionBuffer and (2) cf2_initGlobalRegionBuffer functions in cff/cf2ft.c in FreeType before 2.5.3 do not properly check if a subroutine exists, which allows remote attackers to cause a denial of service (assertion failure), as demonstrated by a crafted ttf file."},{"lang":"es","value":"Las funciones (1) cf2_initLocalRegionBuffer y (2) cf2_initGlobalRegionBuffer en cff/cf2ft.c en FreeType anterior a 2.5.3 no comprueban debidamente si una subrutina existe, lo que permite a atacantes remotos causar una denegación de servicio (fallo de aserción), tal y como fue demostrado por un archivo ttf manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.2","matchCriteriaId":"814C8BFE-8DD6-465A-8AF8-FBB3CDF2F6F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.5:*:*:*:*:*:*:*","matchCriteriaId":"6D67BB0D-8A4B-44F2-8A0D-A4DA3C6A3B3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"648795F7-DA71-43AC-ADAF-9613F090F414"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*","matchCriteriaId":"7F61F047-129C-41A6-8A27-FFCBB8563E91"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=135c3faebb96f8f550bd4f318716f2e1e095a969","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://savannah.nongnu.org/bugs/?41697","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/57447","source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2014/03/12/4","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2148-1","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=135c3faebb96f8f550bd4f318716f2e1e095a969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://savannah.nongnu.org/bugs/?41697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/57447","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2014/03/12/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2148-1","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-3175","sourceIdentifier":"chrome-cve-admin@google.com","published":"2014-08-27T01:55:06.057","lastModified":"2026-06-17T00:07:43.843","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors, related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in other components."},{"lang":"es","value":"Múltiples vulnerabilidades no especificadas en Google Chrome anterior a 37.0.2062.94 permiten a atacantes causar una denegación de servicio o posiblemente tener otro impacto no especificado a través de vectores desconocidos, relacionado con la función load_truetype_glyph en truetype/ttgload.c en FreeType y otras funciones en otros componentes."}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndIncluding":"37.0.2062.93","matchCriteriaId":"D4CF15EF-CF6A-49EB-AD52-B841A771B0C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.0:*:*:*:*:*:*:*","matchCriteriaId":"0F701378-3B81-41AB-82E6-C271B64B325B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.1:*:*:*:*:*:*:*","matchCriteriaId":"D53BE304-211A-404B-B800-6ECB66FC95AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.2:*:*:*:*:*:*:*","matchCriteriaId":"2F8902F1-31DE-4618-BC6A-2CEB77CE0CFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.3:*:*:*:*:*:*:*","matchCriteriaId":"03C82FB7-E434-4FE5-8BBE-2813B640A338"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.4:*:*:*:*:*:*:*","matchCriteriaId":"1C991A75-80C8-4BCC-A837-B8AE12EB08FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.5:*:*:*:*:*:*:*","matchCriteriaId":"2FAA26AE-CB14-4139-967A-2455DDFE988D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.6:*:*:*:*:*:*:*","matchCriteriaId":"1EECB924-BB97-4AF5-A47F-9037749FB1A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.7:*:*:*:*:*:*:*","matchCriteriaId":"9555F177-8FEB-4D9C-90EA-CFA0F720FEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.8:*:*:*:*:*:*:*","matchCriteriaId":"3BE2937A-98C7-4662-9CC7-7681ED323F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.9:*:*:*:*:*:*:*","matchCriteriaId":"CD8602FB-3B25-46F1-AAA9-8B1A1DA69F0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.10:*:*:*:*:*:*:*","matchCriteriaId":"DF0BA783-86BA-4678-913D-80EDF56992A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.11:*:*:*:*:*:*:*","matchCriteriaId":"B1372534-A736-4538-AA7E-CFC08DC056DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.12:*:*:*:*:*:*:*","matchCriteriaId":"A34F1468-0C18-4B01-BA36-AADD8A7ADC2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.13:*:*:*:*:*:*:*","matchCriteriaId":"306639CB-9CA3-4D05-B388-580CB482F039"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.14:*:*:*:*:*:*:*","matchCriteriaId":"4D9CD009-556D-4E6F-964F-7CB01E4E5161"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.15:*:*:*:*:*:*:*","matchCriteriaId":"E6EF83C7-EF96-4523-8249-B61B9243A543"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.16:*:*:*:*:*:*:*","matchCriteriaId":"354673A9-5100-46CE-AB62-C1BD06EA4876"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.17:*:*:*:*:*:*:*","matchCriteriaId":"A5B4C2E7-0AED-4622-B569-D4FBDF431571"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.18:*:*:*:*:*:*:*","matchCriteriaId":"8AB97059-5536-4565-B021-30B03FA6700F"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.19:*:*:*:*:*:*:*","matchCriteriaId":"8EA6B745-1329-4D99-8ACE-14438BD36B70"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.20:*:*:*:*:*:*:*","matchCriteriaId":"B6A8C84C-B5FF-4722-BBEA-9705AC93B8B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.21:*:*:*:*:*:*:*","matchCriteriaId":"84EA8B73-D8EB-4171-81DD-146A96EDF22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.22:*:*:*:*:*:*:*","matchCriteriaId":"4DD2E887-0B9D-4C67-B116-BEB5D7256682"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.23:*:*:*:*:*:*:*","matchCriteriaId":"3E11F118-6BE5-4F76-9B56-88F6981C0A49"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.24:*:*:*:*:*:*:*","matchCriteriaId":"6C8F4B1B-930D-4B2F-AEBD-5B86086ABC39"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.25:*:*:*:*:*:*:*","matchCriteriaId":"E4BBA599-AA08-4B85-B72C-5E11F9D019E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.26:*:*:*:*:*:*:*","matchCriteriaId":"BFA810CC-6DE3-4CE8-A492-6986BD17BE78"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.27:*:*:*:*:*:*:*","matchCriteriaId":"3CE81439-8B09-4106-9523-F43C0B541A98"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.28:*:*:*:*:*:*:*","matchCriteriaId":"208619F0-CFE0-41C4-9C5B-B2EAF6B389BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.29:*:*:*:*:*:*:*","matchCriteriaId":"5E862A55-8795-4BB5-870F-E38DBC5FABC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.30:*:*:*:*:*:*:*","matchCriteriaId":"FEFBC1F1-291C-42B1-9DD4-36B04A9B97AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.31:*:*:*:*:*:*:*","matchCriteriaId":"7C283142-1633-4C59-BB2C-8E085B8D2709"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.32:*:*:*:*:*:*:*","matchCriteriaId":"F2286AE1-8D20-494C-A4DF-1C70C086D5F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.33:*:*:*:*:*:*:*","matchCriteriaId":"E7DE2B94-D778-46C9-A62F-69755BA2BCF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.34:*:*:*:*:*:*:*","matchCriteriaId":"4467FA75-AAD4-4290-9142-0F104DF9FC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.35:*:*:*:*:*:*:*","matchCriteriaId":"73655CAB-70EA-4803-8759-589FE48A85E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.36:*:*:*:*:*:*:*","matchCriteriaId":"F3B05E8A-91D5-4B18-92EF-753BF4AD5903"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.37:*:*:*:*:*:*:*","matchCriteriaId":"59E5F85D-4A69-4446-ACED-B0EFF6C163BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.39:*:*:*:*:*:*:*","matchCriteriaId":"9F6109DC-D7BA-4143-9627-F786AF1B0160"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.43:*:*:*:*:*:*:*","matchCriteriaId":"0D4A1AF1-4677-47B4-BA5E-538895F206B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.44:*:*:*:*:*:*:*","matchCriteriaId":"340B17EA-7026-46A9-84C3-26EAC4CE9B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.45:*:*:*:*:*:*:*","matchCriteriaId":"79AA77B6-BF3E-425F-8F07-A5BB8E030C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.46:*:*:*:*:*:*:*","matchCriteriaId":"B37F78D0-E7AB-406C-9A97-0600D5AD19AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.47:*:*:*:*:*:*:*","matchCriteriaId":"EE4DB73C-B60E-4630-9CE5-99408C1FB4DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.48:*:*:*:*:*:*:*","matchCriteriaId":"2622DAA5-406F-4FC4-8D6F-97759DF6BD2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.49:*:*:*:*:*:*:*","matchCriteriaId":"8E5A596B-6184-453E-8450-F8A057C1D50A"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.50:*:*:*:*:*:*:*","matchCriteriaId":"D00A3638-7D95-4E90-9DA7-82C2F917C57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.51:*:*:*:*:*:*:*","matchCriteriaId":"45BC22F7-65EC-4CAA-ABD4-1C39C8084E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.52:*:*:*:*:*:*:*","matchCriteriaId":"245147AE-43A2-45C8-8179-25948F630B29"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.53:*:*:*:*:*:*:*","matchCriteriaId":"439343BC-5EAD-4150-ABDC-B9A6714B29ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.54:*:*:*:*:*:*:*","matchCriteriaId":"10988982-6718-48B2-BCF8-370E26435A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.55:*:*:*:*:*:*:*","matchCriteriaId":"69A7A23A-013A-4AF2-B5FD-07FE36DDF9FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.56:*:*:*:*:*:*:*","matchCriteriaId":"9D8D4586-C566-49BC-8942-DAA852CD1050"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.57:*:*:*:*:*:*:*","matchCriteriaId":"F333616F-1BBB-4A8C-89E3-FF46740385F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.58:*:*:*:*:*:*:*","matchCriteriaId":"C0ABB09E-A89C-47E0-BDF8-59C9DDFB328E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.59:*:*:*:*:*:*:*","matchCriteriaId":"89BC8272-32B1-429E-AB97-85993A54B946"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.60:*:*:*:*:*:*:*","matchCriteriaId":"3EDDCFE3-10A3-4207-8513-F2641CC6C14E"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.61:*:*:*:*:*:*:*","matchCriteriaId":"5BC8932C-7631-4546-8C79-D9C5C60BCA6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.62:*:*:*:*:*:*:*","matchCriteriaId":"EB9B2D05-44B4-4120-8B70-471FA7A11475"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.63:*:*:*:*:*:*:*","matchCriteriaId":"CE4F4473-F7B9-4C4F-A05C-0CABDD381B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.64:*:*:*:*:*:*:*","matchCriteriaId":"767A2490-4719-4F77-9084-224660AD8C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.65:*:*:*:*:*:*:*","matchCriteriaId":"16E075AF-C990-402A-BA3A-490D3CC565DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.66:*:*:*:*:*:*:*","matchCriteriaId":"777F4F2A-8699-4925-BE7B-4E96D3D8B486"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.67:*:*:*:*:*:*:*","matchCriteriaId":"2D3A975E-1245-48D1-970F-292EBBC27BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.68:*:*:*:*:*:*:*","matchCriteriaId":"47C3DFFE-6BD7-4E06-A1FF-CA64ABBE2EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.69:*:*:*:*:*:*:*","matchCriteriaId":"244E0541-07AD-4E23-BD9A-99E82E5095E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.70:*:*:*:*:*:*:*","matchCriteriaId":"9406F53F-D335-4C0D-9FFE-031A8D23DAF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.71:*:*:*:*:*:*:*","matchCriteriaId":"059F95BC-6375-45FF-A5BC-A3DCB09C9B9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.72:*:*:*:*:*:*:*","matchCriteriaId":"95B22F05-AF54-4DF3-814A-4D4722826B7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.73:*:*:*:*:*:*:*","matchCriteriaId":"57659829-7B94-4E28-82AF-1E6AC14B65C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.74:*:*:*:*:*:*:*","matchCriteriaId":"CE8D1E75-3C8C-4DAD-8C69-43CD3BF0C16B"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.75:*:*:*:*:*:*:*","matchCriteriaId":"5B41B7DA-642F-45D7-9C44-6DBDDB180F67"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.76:*:*:*:*:*:*:*","matchCriteriaId":"4345C4B0-FA91-4E8C-B5B1-927F3622CA2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.77:*:*:*:*:*:*:*","matchCriteriaId":"9C2391A9-A0D1-45DC-8FEA-79DE29775271"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.78:*:*:*:*:*:*:*","matchCriteriaId":"B86B675F-E365-49DC-90F7-5DB02816E609"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.80:*:*:*:*:*:*:*","matchCriteriaId":"FA5436F8-5125-45A4-B14E-958335A60BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.81:*:*:*:*:*:*:*","matchCriteriaId":"34BAC3C9-D121-4FF4-8DC6-1C2022B1F536"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.89:*:*:*:*:*:*:*","matchCriteriaId":"752A92E8-B928-4743-9D1F-259FEEC29299"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.90:*:*:*:*:*:*:*","matchCriteriaId":"4704C7D1-B3A0-4357-91B4-B3C66E476097"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.91:*:*:*:*:*:*:*","matchCriteriaId":"FB4F2DE1-350D-4A3B-A1C4-F1216938A7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:37.0.2062.92:*:*:*:*:*:*:*","matchCriteriaId":"F7040D56-1D04-4E2A-9E1C-0306784CA6DE"}]}]}],"references":[{"url":"http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html","source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html","source":"chrome-cve-admin@google.com"},{"url":"http://secunia.com/advisories/60268","source":"chrome-cve-admin@google.com"},{"url":"http://secunia.com/advisories/60424","source":"chrome-cve-admin@google.com"},{"url":"http://security.gentoo.org/glsa/glsa-201408-16.xml","source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2014/dsa-3039","source":"chrome-cve-admin@google.com"},{"url":"http://www.securityfocus.com/bid/69402","source":"chrome-cve-admin@google.com"},{"url":"http://www.securitytracker.com/id/1030767","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=149871","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=337572","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=350782","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=357452","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=364062","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=366687","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=367991","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=368978","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=372410","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=372413","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=379656","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=381031","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=381244","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=381521","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382240","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382241","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382242","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382243","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382601","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382606","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382639","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382656","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382820","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=383703","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=384662","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=387016","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=387315","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=387371","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=388771","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=389216","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=389280","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=389285","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=389316","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=389570","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=390176","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=390304","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=393938","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=394026","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=395972","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=396255","source":"chrome-cve-admin@google.com"},{"url":"https://code.google.com/p/chromium/issues/detail?id=397258","source":"chrome-cve-admin@google.com"},{"url":"https://crbug.com/406143","source":"chrome-cve-admin@google.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95475","source":"chrome-cve-admin@google.com"},{"url":"http://googlechromereleases.blogspot.com/2014/08/stable-channel-update_26.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/60424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201408-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2014/dsa-3039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/69402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1030767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=149871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=337572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=350782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=357452","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=364062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=366687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=367991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=368978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=372410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=372413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=379656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=381031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=381244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=381521","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=382820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=383703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=384662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=387016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=387315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=387371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=388771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=389216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=389280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=389285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=389316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=389570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=390176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=390304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=393938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=394026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=395972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=396255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=397258","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://crbug.com/406143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/95475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9656","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:15.163","lastModified":"2026-06-17T00:18:43.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted OpenType font."},{"lang":"es","value":"La función tt_sbit_decoder_load_image en sfnt/ttsbit.c en FreeType anterior a 2.5.4 no comprueba correctamente si hay un desbordamiento de enteros, lo que permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango) o posiblemente tener otro impacto no especificado a través de una fuente OpenType manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=196","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f0292bb9920aa1dbfed5f53861e7c7a89b35833a","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f0292bb9920aa1dbfed5f53861e7c7a89b35833a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9657","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:19.647","lastModified":"2026-06-17T00:18:44.047","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font."},{"lang":"es","value":"La función tt_face_load_hdmx en truetype/ttpload.c en FreeType anterior a 2.5.4 no establece un tamaño de registro mínimo, lo que permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango) o posiblemente tener otro impacto no especificado a través de una fuente TrueType manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*","matchCriteriaId":"FC633250-EB1E-4484-9BCB-977C8F9EB0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=195","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=eca0f067068020870a429fe91f6329e499390d55","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=eca0f067068020870a429fe91f6329e499390d55","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9658","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:20.647","lastModified":"2026-06-17T00:18:44.217","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted TrueType font."},{"lang":"es","value":"La función tt_face_load_kern en sfnt/ttkern.c en FreeType anterior a 2.5.4 fuerza una longitud de tabla mínima incorrecta, lo que permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango) o posiblemente tener otro impacto no especificado a través de una fuente TrueType manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*","matchCriteriaId":"FC633250-EB1E-4484-9BCB-977C8F9EB0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*","matchCriteriaId":"8CDFD93B-693D-46DC-9C39-FDECB3E619E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=194","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f70d9342e65cd2cb44e9f26b6d7edeedf191fc6c","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f70d9342e65cd2cb44e9f26b6d7edeedf191fc6c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9659","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:21.633","lastModified":"2026-06-17T00:18:44.380","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted OpenType font.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2240."},{"lang":"es","value":"cff/cf2intrp.c en el interprete CFF CharString en FreeType anterior a 2.5.4 proceda con indicios (hints) adicionales después de que la mascara de indicios (hints) haya sido computado, lo que permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (desbordamiento de buffere basado en pila) a través de una fuente OpenType manipulada. NOTA: esta vulnerabilidad existe debido a una solución incompleta para CVE-2014-2240."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*","matchCriteriaId":"FC633250-EB1E-4484-9BCB-977C8F9EB0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]}],"references":[{"url":"http://code.google.com/p/google-security-research/issues/detail?id=190","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2cdc4562f873237f1c77d43540537c7a721d3fd8","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2cdc4562f873237f1c77d43540537c7a721d3fd8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9660","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:22.680","lastModified":"2026-06-17T00:18:44.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a crafted BDF font."},{"lang":"es","value":"La función _bdf_parse_glyphs en bdf/bdflib.c en FreeType anterior a 2.5.4 no maneja correctamente un registro ENDCHAR perdido, lo que permite a atacantes remotos causar una denegación de servicio (referencia a puntero nulo) o posiblemente tener otro impacto no especificado a través de una fuente BDF manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*","matchCriteriaId":"FC633250-EB1E-4484-9BCB-977C8F9EB0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*","matchCriteriaId":"8CDFD93B-693D-46DC-9C39-FDECB3E619E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=188","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=af8346172a7b573715134f7a51e6c5c60fa7f2ab","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=af8346172a7b573715134f7a51e6c5c60fa7f2ab","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2014-9661","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:23.587","lastModified":"2026-06-17T00:18:44.683","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted Type42 font."},{"lang":"es","value":"type42/t42parse.c en FreeType anterior a 2.5.4 no considera que escaneo puede resultar incompleto sin provoca un error, lo que permite a atacantes remotos causar una denegación de servicio (uso después de liberación) o posiblemente tener otro impacto no especificado a través de una fuente Type42 manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*","matchCriteriaId":"8CDFD93B-693D-46DC-9C39-FDECB3E619E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org"},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=187","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=3788187e0c396952cd7d905c6c61f3ff8e84b2b4","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=42fcd6693ec7bd6ffc65ddc63e74287a65dda669","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/134396/FreeType-2.5.3-Type42-Parsing-Use-After-Free.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=3788187e0c396952cd7d905c6c61f3ff8e84b2b4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=42fcd6693ec7bd6ffc65ddc63e74287a65dda669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/134396/FreeType-2.5.3-Type42-Parsing-Use-After-Free.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/416.html\">CWE-416: Use After Free</a>"}},{"cve":{"id":"CVE-2014-9662","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:24.537","lastModified":"2026-06-17T00:18:44.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"cff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation functions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted OTF font."},{"lang":"es","value":"cff/cf2ft.c en FreeType anterior a 2.5.4 no valida los valores de retorno de las funciones de la reserva de puntos, lo que permite a atacantes remotos causar una denegación de servicio (desbordamiento de buffer basado en memoria dinámica) o posiblemente tener otro impacto no especificado a través de una fuente OTF manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org"},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=185","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=5f201ab5c24cb69bc96b724fd66e739928d6c5e2","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=5f201ab5c24cb69bc96b724fd66e739928d6c5e2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9663","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:25.490","lastModified":"2026-06-17T00:18:44.990","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted cmap SFNT table."},{"lang":"es","value":"La función tt_cmap4_validate en sfnt/ttcmap.c en FreeType anterior a 2.5.4 valida cierto campo de longitud antes de que el valor de este campo está calculado completamente, lo que permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango) o posiblemente tener otro impacto no especificado a través de una tabla SFNT cmap manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*","matchCriteriaId":"FC633250-EB1E-4484-9BCB-977C8F9EB0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*","matchCriteriaId":"8CDFD93B-693D-46DC-9C39-FDECB3E619E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=184","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9bd20b7304aae61de5d50ac359cf27132bafd4c1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=9bd20b7304aae61de5d50ac359cf27132bafd4c1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9664","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:26.413","lastModified":"2026-06-17T00:18:45.157","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted Type42 font, related to type42/t42parse.c and type1/t1load.c."},{"lang":"es","value":"FreeType anterior a 2.5.4 no comprueba si hay un final de los datos durante ciertas acciones de análisis sintáctico, lo que permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango) o posiblemente tener otro impacto no especificado a través de una fuente Type42 manipulada, relacionado con type42/t42parse.c y type1/t1load.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*","matchCriteriaId":"8CDFD93B-693D-46DC-9C39-FDECB3E619E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*","matchCriteriaId":"FC633250-EB1E-4484-9BCB-977C8F9EB0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=183","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=73be9f9ab67842cfbec36ee99e8d2301434c84ca","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=dd89710f0f643eb0f99a3830e0712d26c7642acd","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=73be9f9ab67842cfbec36ee99e8d2301434c84ca","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=dd89710f0f643eb0f99a3830e0712d26c7642acd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9665","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:27.337","lastModified":"2026-06-17T00:18:45.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact by embedding a PNG file in a .ttf font file."},{"lang":"es","value":"La función Load_SBit_Png en sfnt/pngshim.c en FreeType anterior a 2.5.4 no restringe los valores de filas y tonos de los datos PNG, lo que permite a atacantes remotos causar una denegación de servicio (desbordamiento de enteros y desbordamiento de buffer basado en memoria dinámica) o posiblemente tener otro impacto no especificado mediante el embebido de un fichero PNG en un fichero de fuentes .ttf."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*","matchCriteriaId":"E88A537F-F4D0-46B9-9E37-965233C2A355"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://code.google.com/p/google-security-research/issues/detail?id=168","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=54abd22891bd51ef8b533b24df53b3019b5cee81","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b3500af717010137046ec4076d1e1c0641e33727","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=54abd22891bd51ef8b533b24df53b3019b5cee81","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=b3500af717010137046ec4076d1e1c0641e33727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9666","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:28.193","lastModified":"2026-06-17T00:18:45.490","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted embedded bitmap."},{"lang":"es","value":"La función tt_sbit_decoder_init en sfnt/ttsbit.c en FreeType anterior a 2.5.4 proceda con una asociación de contar a tamaño (count-to-size) sin restringir el valor de la cuenta, lo que permite a atacantes remotos causar una denegación de servicio (desbordamiento de enteros y lectura fuera de rango o posiblemente tener otro impacto a través de un bitmap embebido manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*","matchCriteriaId":"FC633250-EB1E-4484-9BCB-977C8F9EB0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*","matchCriteriaId":"8CDFD93B-693D-46DC-9C39-FDECB3E619E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=167","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=257c270bd25e15890190a28a1456e7623bba4439","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=257c270bd25e15890190a28a1456e7623bba4439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9667","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:29.133","lastModified":"2026-06-17T00:18:45.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer overflow and out-of-bounds read) or possibly have unspecified other impact via a crafted SFNT table."},{"lang":"es","value":"sfnt/ttload.c en FreeType anterior a 2.5.4 proceda con los cálculos de la longitud de offset sin restringir los valores, lo que permite a atacantes remotos causar una denegación de servicio (desbordamiento de enteros y lectura fuera de rango) o posiblemnete tener otro impacto no especificado a través de una tabla SFNT manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*","matchCriteriaId":"8CDFD93B-693D-46DC-9C39-FDECB3E619E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=166","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=677ddf4f1dc1b36cef7c7ddd59a14c508f4b1891","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=677ddf4f1dc1b36cef7c7ddd59a14c508f4b1891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9668","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:29.977","lastModified":"2026-06-17T00:18:45.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The woff_open_font function in sfnt/sfobjs.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting length values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Web Open Font Format (WOFF) file."},{"lang":"es","value":"La función woff_open_font en sfnt/sfobjs.c en FreeType anterior a 2.5.4 proceda con los cálculos de desplazamiento más longitud (offset+length) sin restringir los valores de longitud, lo que permite a atacantes remotos causar una denegación de servicio (desbordamiento de enteros y desbordamiento de buffer basado en memoria dinámica) o posiblemente tener otro impacto no especificado a través de un fichero Web Open Font Format (WOFF) manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]}],"references":[{"url":"http://code.google.com/p/google-security-research/issues/detail?id=164","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f46add13895337ece929b18bb8f036431b3fb538","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f46add13895337ece929b18bb8f036431b3fb538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9669","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:30.850","lastModified":"2026-06-17T00:18:45.957","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have unspecified other impact via a crafted cmap SFNT table."},{"lang":"es","value":"Múltiples desbordamientos de enteros en sfnt/ttcmap.c en FreeType anterior a 2.5.4 permiten a atacantes remotos causar una denegación de servicio (lectura fuera de rango o corrupción de memoria) o posiblemente tener otro impacto no especificado a través de una tabla SFNT cmap manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*","matchCriteriaId":"8CDFD93B-693D-46DC-9C39-FDECB3E619E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*","matchCriteriaId":"FC633250-EB1E-4484-9BCB-977C8F9EB0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=163","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=602040b1112c9f94d68e200be59ea7ac3d104565","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=602040b1112c9f94d68e200be59ea7ac3d104565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9670","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:31.693","lastModified":"2026-06-17T00:18:46.123","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer overflow, NULL pointer dereference, and application crash) via a crafted PCF file that specifies negative values for the first column and first row."},{"lang":"es","value":"Múltiples erroes de signo de enteros en la función pcf_get_encodings en pcf/pcfread.c en FreeType anterior a 2.5.4 permiten a atacantes remotos causar una denegación de servicio (desbordamiento de enteros, referencia a puntero nulo y caída de aplicación) a través de un fichero PCF manipulado que especifica valores negativos para la primera columna y la primera fila."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*","matchCriteriaId":"FC633250-EB1E-4484-9BCB-977C8F9EB0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*","matchCriteriaId":"8CDFD93B-693D-46DC-9C39-FDECB3E619E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=158","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=ef1eba75187adfac750f326b563fe543dd5ff4e6","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=ef1eba75187adfac750f326b563fe543dd5ff4e6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9671","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:32.617","lastModified":"2026-06-17T00:18:46.297","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PCF file with a 0xffffffff size value that is improperly incremented."},{"lang":"es","value":"Error de superación de límite (off-by-one) en la función pcf_get_properties en pcf/pcfread.c en FreeType anterior a 2.5.4 permite a atacantes remotos causar una denegación de servicio (referencia a puntero nulo y caída de aplicación) a través de un fichero PCF manipulado con un valor de tamaño 0xffffffff que está incrementado incorrectamente."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6:*:*:*:*:*:*:*","matchCriteriaId":"8CDFD93B-693D-46DC-9C39-FDECB3E619E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*","matchCriteriaId":"FC633250-EB1E-4484-9BCB-977C8F9EB0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=157","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0e2f5d518c60e2978f26400d110eff178fa7e3c3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0e2f5d518c60e2978f26400d110eff178fa7e3c3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/476.html\">CWE-476: NULL Pointer Dereference</a>"}},{"cve":{"id":"CVE-2014-9672","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:33.663","lastModified":"2026-06-17T00:18:46.450","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Array index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information from process memory via a crafted FOND resource in a Mac font file."},{"lang":"es","value":"Error en el indice del array en la función parse_fond en base/ftmac.c en FreeType anterior a 2.5.4 permite a atacantes remotos causar una denegación de servicio (lectura fuera de rango) o obtener información sensible desde el proceso de la memoria a través de un recurso FOND manipulado en un fichero de fuentes Mac."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:P","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*","matchCriteriaId":"FC633250-EB1E-4484-9BCB-977C8F9EB0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=155","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=18a8f0d9943369449bc4de92d411c78fb08d616c","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/134395/FreeType-2.5.3-Mac-FOND-Resource-Parsing-Out-Of-Bounds-Read-From-Stack.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=18a8f0d9943369449bc4de92d411c78fb08d616c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/134395/FreeType-2.5.3-Mac-FOND-Resource-Parsing-Out-Of-Bounds-Read-From-Stack.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9673","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:34.647","lastModified":"2026-06-17T00:18:46.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font."},{"lang":"es","value":"Error de signo de enteros en la función Mac_Read_POST_Resource en base/ftobjs.c en FreeType anterior a 2.5.4 permite a atacantes remotos causar una denegación de servicio (desbordamiento de buffer basado en memoria dinámica) o posiblemente tener otro impacto no especificado a través de una fuente Mac manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=154","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=35252ae9aa1dd9343e9f4884e9ddb1fee10ef415","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=35252ae9aa1dd9343e9f4884e9ddb1fee10ef415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9674","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:35.633","lastModified":"2026-06-17T00:18:46.750","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote attackers to cause a denial of service (integer overflow and heap-based buffer overflow) or possibly have unspecified other impact via a crafted Mac font."},{"lang":"es","value":"La función Mac_Read_POST_Resource en base/ftobjs.c en FreeType anterior a 2.5.4 proceda con la suma de los valores de longitud sin validar los valores originales, lo que permite a atacantes remotos causar una denegación de servicio (desbordamiento de enteros y desbordamiento de buffer basado en memoria dinámica) o posiblemente tener otro impacto no especificado a través de una fuente Mac manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10.0:*:*:*:*:*:*:*","matchCriteriaId":"FC633250-EB1E-4484-9BCB-977C8F9EB0B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1C288F-326B-497B-B26C-D26E01262DDB"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=153","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=240c94a185cd8dae7d03059abec8a5662c35ecd3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=cd4a5a26e591d01494567df9dec7f72d59551f6e","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3461","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=240c94a185cd8dae7d03059abec8a5662c35ecd3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=cd4a5a26e591d01494567df9dec7f72d59551f6e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"}],"evaluatorComment":"<a href=\"http://cwe.mitre.org/data/definitions/190.html\">CWE-190: Integer Overflow or Wraparound</a>"}},{"cve":{"id":"CVE-2014-9675","sourceIdentifier":"cve@mitre.org","published":"2015-02-08T11:59:36.490","lastModified":"2026-06-17T00:18:46.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer values and bypass the ASLR protection mechanism via a crafted BDF font."},{"lang":"es","value":"bdf/bdflib.c en FreeType anterior a 2.5.4 identifica los nombres de propiedades con solamente verificar que una subcadena inicial esté presente, lo que permite a atacantes remotos descubrir valores de punteros de la memoria dinámica y evadir el mecanismo de protección ASLR a través de una fuente BDF manipulada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*","matchCriteriaId":"5D37DF0F-F863-45AC-853A-3E04F9FEC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.10:*:*:*:*:*:*:*","matchCriteriaId":"49A63F39-30BE-443F-AF10-6245587D3359"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*","matchCriteriaId":"FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*","matchCriteriaId":"56BDB5A0-0839-4A20-A003-B8CD56F48171"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C2FAC325-6EEB-466D-9EBA-8ED4DBC9CFBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84489B-B08C-4854-8A12-D01B6E45CF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_hpc_node_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"7071F0C7-E43E-4F2E-9FEB-E8FB3DEA4749"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:6.6.z:*:*:*:*:*:*:*","matchCriteriaId":"3FB4F7C3-1521-42B6-9820-15C2B156BAD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0E8CD4EF-DC90-40BB-A721-6EC087507906"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"},{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","matchCriteriaId":"03117DF1-3BEC-4B8D-AD63-DBBDB2126081"}]}]}],"references":[{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=151","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2c4832d30939b45c05757f0a05128ce64c4cacc7","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"cve@mitre.org"},{"url":"https://source.android.com/security/bulletin/2016-11-01.html","source":"cve@mitre.org"},{"url":"http://advisories.mageia.org/MGASA-2015-0083.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://code.google.com/p/google-security-research/issues/detail?id=151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=2c4832d30939b45c05757f0a05128ce64c4cacc7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150148.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150162.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-03/msg00091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0696.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2015/dsa-3188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/72986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2510-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201503-05","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://source.android.com/security/bulletin/2016-11-01.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9745","sourceIdentifier":"cve@mitre.org","published":"2015-09-14T20:59:00.163","lastModified":"2026-06-17T00:18:54.703","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The parse_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) via a \"broken number-with-base\" in a Postscript stream, as demonstrated by 8#garbage."},{"lang":"es","value":"Vulnerabilidad en la función parse_encoding en type1/t1load.c en FreeType en versiones anteriores a 2.5.3, permite a atacantes remotos causar una denegación de servicio (bucle infinito) a través de un 'broken number-with-base' en un stream Postscript, según lo demostrado por 8#garbage."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.2","matchCriteriaId":"814C8BFE-8DD6-465A-8AF8-FBB3CDF2F6F9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*","matchCriteriaId":"B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*","matchCriteriaId":"F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","matchCriteriaId":"A10BC294-9196-425F-9FB0-B1625465B47F"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=df14e6c0b9592cbb24d5381dfc6106b14f915e75","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-10/msg00017.html","source":"cve@mitre.org"},{"url":"http://savannah.nongnu.org/bugs/index.php?41590","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2015/dsa-3370","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/76727","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id/1033536","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"cve@mitre.org"},{"url":"https://bugs.launchpad.net/ubuntu/+source/freetype/+bug/1492124","source":"cve@mitre.org"},{"url":"https://code.google.com/p/chromium/issues/detail?id=459050","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=df14e6c0b9592cbb24d5381dfc6106b14f915e75","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2015-10/msg00017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://savannah.nongnu.org/bugs/index.php?41590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/76727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2739-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.launchpad.net/ubuntu/+source/freetype/+bug/1492124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://code.google.com/p/chromium/issues/detail?id=459050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9746","sourceIdentifier":"security@ubuntu.com","published":"2016-06-07T14:06:01.790","lastModified":"2026-06-17T00:18:54.830","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) t1_parse_font_matrix function in type1/t1load.c, (2) cid_parse_font_matrix function in cid/cidload.c, (3) t42_parse_font_matrix function in type42/t42parse.c, and (4) ps_parser_load_field function in psaux/psobjs.c in FreeType before 2.5.4 do not check return values, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted font."},{"lang":"es","value":"Las funciones (1) t1_parse_font_matrix en type1/t1load.c, (2) cid_parse_font_matrix en cid/cidload.c, (3) t42_parse_font_matrix en type42/t42parse.c y (4) ps_parser_load_field en psaux/psobjs.c en FreeType en versiones anteriores a 2.5.4 no verifican los valores de retorno, lo que permite a atacantes remotos provocar una denegación de servicio (acceso a memoria no inicializada y caída de aplicación) o posiblemente tener otro impacto no especificado a través de una fuente manipulada."}],"affected":[{"source":"security@ubuntu.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8b281f83e8516535756f92dbf90940ac44bd45e1","source":"security@ubuntu.com"},{"url":"http://www.debian.org/security/2015/dsa-3370","source":"security@ubuntu.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/11/4","source":"security@ubuntu.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/25/4","source":"security@ubuntu.com"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"security@ubuntu.com"},{"url":"https://savannah.nongnu.org/bugs/?41309","source":"security@ubuntu.com"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=8b281f83e8516535756f92dbf90940ac44bd45e1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/11/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/25/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://savannah.nongnu.org/bugs/?41309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2014-9747","sourceIdentifier":"security@ubuntu.com","published":"2016-06-07T14:06:03.073","lastModified":"2026-06-17T00:18:54.950","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode, which allows remote attackers to cause a denial of service (infinite loop) via a Type42 font."},{"lang":"es","value":"La función t42_parse_encoding en type42/t42parse.c en FreeType en versiones anteriores a 2.5.4 no actualiza adecuadamente la posición actual para el modo immediates-only lo que permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de una fuente Type42."}],"affected":[{"source":"security@ubuntu.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.3","matchCriteriaId":"05EE9A32-E91F-4C68-B3A9-AC5AB35C2BB3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/src/type42/t42parse.c?id=8b281f83e8516535756f92dbf90940ac44bd45e1","source":"security@ubuntu.com"},{"url":"http://www.debian.org/security/2015/dsa-3370","source":"security@ubuntu.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/11/4","source":"security@ubuntu.com"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/25/4","source":"security@ubuntu.com"},{"url":"https://savannah.nongnu.org/bugs/?41309","source":"security@ubuntu.com"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/src/type42/t42parse.c?id=8b281f83e8516535756f92dbf90940ac44bd45e1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/11/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2015/09/25/4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://savannah.nongnu.org/bugs/?41309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-10244","sourceIdentifier":"cve@mitre.org","published":"2017-03-06T06:59:00.177","lastModified":"2026-06-17T00:39:21.277","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted file."},{"lang":"es","value":"La función parse_charstrings en type1/t1load.c en FreeType 2 en versiones anteriores a 2.7 no asegura que una fuente contiene un nombre glyph, lo que permite a atacantes remotos provocar una denegación de servicio (sobre lectura de búfer basada en memoria dinámica) o posiblemente tener otro impacto no especificado a través de un archivo manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.7.1","matchCriteriaId":"00F6519F-A001-4D60-BB62-96C226DD828A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLog?h=VER-2-7","source":"cve@mitre.org","tags":["Release Notes","Third Party Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3839","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/97405","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038090","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038201","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://source.android.com/security/bulletin/2017-04-01","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLog?h=VER-2-7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Third Party Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/97405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://source.android.com/security/bulletin/2017-04-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2016-10328","sourceIdentifier":"cve@mitre.org","published":"2017-04-14T04:59:00.197","lastModified":"2026-06-17T00:39:29.550","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cff_parser_run function in cff/cffparse.c."},{"lang":"es","value":"FreeType 2 en versiones anteriores a 16-12-2016 tiene una escritura fuera de límites provocada por un desbordamiento de búfer basado en memoria dinámica relacionado con la función cff_parser_run en cff/cffparse.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7","matchCriteriaId":"8586B21E-6FF2-40B5-BB2A-20424D4EEDE5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*","matchCriteriaId":"72F1A960-EBA5-4BDB-B629-20F0D2384562"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=beecf80a6deecbaf5d264d4f864451bde4fe98b8","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://savannah.nongnu.org/bugs/?func=detailitem&item_id=49858","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/97677","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=289","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=beecf80a6deecbaf5d264d4f864451bde4fe98b8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://savannah.nongnu.org/bugs/?func=detailitem&item_id=49858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/97677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-7857","sourceIdentifier":"cve@mitre.org","published":"2017-04-14T04:59:00.273","lastModified":"2026-06-17T01:25:21.160","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c."},{"lang":"es","value":"FreeType 2 en versiones anteriores a 2017-03-08 tiene una escritura fuera de límites provocada por un desbordamiento de búfer basado en memoria dinámica relacionado con la función TT_Get_MM_Var en truetype/ttgxvar.c y la función sfnt_init_face en sfnt/sfobjs.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionStartIncluding":"2.7","versionEndExcluding":"2.8","matchCriteriaId":"F2A965F0-BC5A-4267-9A1A-4FA55A76D390"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7bbb91fbf47fc0775cc9705673caf0c47a81f94b","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/97680","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=759","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7bbb91fbf47fc0775cc9705673caf0c47a81f94b","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/97680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-7858","sourceIdentifier":"cve@mitre.org","published":"2017-04-14T04:59:00.307","lastModified":"2026-06-17T01:25:21.273","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType 2 before 2017-03-07 has an out-of-bounds write related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfobjs.c."},{"lang":"es","value":"FreeType 2 en versiones anteriores a 07-03-2017 tiene una escritura fuera de límites en relación con la función TT_Get_MM_Var en truetype/ttgxvar.c y en la función sfnt_init_face en sfnt/sfobjs.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"AEEA3966-EA75-48BB-8D9C-3C834BA9CC8A"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=779309744222a736eba0f1731e8162fce6288d4e","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/97682","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=738","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=779309744222a736eba0f1731e8162fce6288d4e","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/97682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2017-7864","sourceIdentifier":"cve@mitre.org","published":"2017-04-14T04:59:00.557","lastModified":"2026-06-17T01:25:21.973","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tt_size_reset function in truetype/ttobjs.c."},{"lang":"es","value":"FreeType 2 en versiones anteriores a 02-02-2017 tiene una escritura fuera de límites provocado por un desbordamiento de búfer basado en memoria dinámica en relación con la función tt_size_reset en truetype/ttobjs.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"AEEA3966-EA75-48BB-8D9C-3C834BA9CC8A"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=e6699596af5c5d6f0ae0ea06e19df87dce088df8","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/97673","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=509","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=e6699596af5c5d6f0ae0ea06e19df87dce088df8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/97673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2017-8105","sourceIdentifier":"cve@mitre.org","published":"2017-04-24T18:59:00.897","lastModified":"2026-06-17T01:25:46.873","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings function in psaux/t1decode.c."},{"lang":"es","value":"FreeType 2 en versiones anteriores a 24-03-2017 tiene una escritura fuera de limites provocada por un desbordamiento de búfer relacionado con la función t1_decoder_parse_charstrengs en psaux/t1decode.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.7.1","matchCriteriaId":"00F6519F-A001-4D60-BB62-96C226DD828A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f958c48ee431bef8d4d466b40c9cb2d4dbcb7791","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3839","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/99093","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=935","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"cve@mitre.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f958c48ee431bef8d4d466b40c9cb2d4dbcb7791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/99093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2017-8287","sourceIdentifier":"cve@mitre.org","published":"2017-04-27T00:59:00.320","lastModified":"2026-06-17T01:26:07.850","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builder_close_contour function in psaux/psobjs.c."},{"lang":"es","value":"FreeType 2 antes de 2017-03-26 tiene una escritura fuera de límites causada por un desbordamiento de búfer basado en heap relacionado con la función t1_builder_close_contour en psaux / psobjs.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.1","matchCriteriaId":"AEEA3966-EA75-48BB-8D9C-3C834BA9CC8A"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=3774fc08b502c3e685afca098b6e8a195aded6a0","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3839","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/99091","source":"cve@mitre.org"},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=941","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"cve@mitre.org"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=3774fc08b502c3e685afca098b6e8a195aded6a0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/99091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/201706-14","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2017-14989","sourceIdentifier":"cve@mitre.org","published":"2017-10-03T01:29:02.967","lastModified":"2026-06-17T01:07:06.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code."},{"lang":"es","value":"Un uso de memoria previamente liberada en RenderFreetype in MagickCore/annotate.c en ImageMagick 7.0.7-4 Q16 permite que los atacantes provoquen el cierre inesperado de la aplicación mediante un archivo de fuente manipulado, ya que la función FT_Done_Glyph (de FreeType 2) se llama en un lugar incorrecto en el código de ImageMagick."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-416"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:7.0.7-4:*:*:*:*:*:*:*","matchCriteriaId":"6B296460-7B41-4975-960C-0B46083F09C2"}]}]}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/issues/781","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3681-1/","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2017/dsa-4032","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2017/dsa-4040","source":"cve@mitre.org"},{"url":"https://github.com/ImageMagick/ImageMagick/issues/781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3681-1/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2017/dsa-4032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2017/dsa-4040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2018-6942","sourceIdentifier":"cve@mitre.org","published":"2018-02-13T05:29:00.267","lastModified":"2026-06-17T02:02:29.537","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in FreeType 2 through 2.9. A NULL pointer dereference in the Ins_GETVARIATION() function within ttinterp.c could lead to DoS via a crafted font file."},{"lang":"es","value":"Se ha descubierto un problema hasta la versión 2.9 de FreeType 2. Una desreferencia de puntero NULL en la función Ins_GETVARIATION() en ttinterp.c podría conducir a DoS mediante un archivo de fuentes manipulado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.9","matchCriteriaId":"C079B991-75F4-471A-8F9B-9561EBF07A3A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*","matchCriteriaId":"9070C9D8-A14A-467F-8253-33B966C16886"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00054.html","source":"cve@mitre.org"},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5736","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=29c759284e305ec428703c9a5831d0b1fc3497ef","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3572-1/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=29c759284e305ec428703c9a5831d0b1fc3497ef","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3572-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-9290","sourceIdentifier":"cve@mitre.org","published":"2019-07-30T13:15:12.670","lastModified":"2026-06-17T00:36:13.427","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new values of cur and limit are sensible before going to Again."},{"lang":"es","value":"En FreeType anterior a versión 2.6.1, se presenta una lectura excesiva de búfer en el archivo type1/t1parse.c en la función T1_Get_Private_Dict, donde no hay ninguna comprobación de que los nuevos valores de cur y limit son razonables antes de ir a Again."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.1","matchCriteriaId":"6229BC68-7A96-4AA6-ACE9-6FD89C24B203"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/type1/t1parse.c?id=e3058617f384cb6709f3878f753fa17aca9e3a30","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/08/msg00019.html","source":"cve@mitre.org"},{"url":"https://savannah.nongnu.org/bugs/?45923","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K38315305","source":"cve@mitre.org"},{"url":"https://support.f5.com/csp/article/K38315305?utm_source=f5support&amp%3Butm_medium=RSS","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/type1/t1parse.c?id=e3058617f384cb6709f3878f753fa17aca9e3a30","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/08/msg00019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://savannah.nongnu.org/bugs/?45923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://support.f5.com/csp/article/K38315305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.f5.com/csp/article/K38315305?utm_source=f5support&amp%3Butm_medium=RSS","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-9381","sourceIdentifier":"cve@mitre.org","published":"2019-09-03T05:15:10.463","lastModified":"2026-06-17T00:36:24.207","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c."},{"lang":"es","value":"FreeType en versiones anteriores a la 2.6.1 tiene una sobrelectura de búfer basada en memoria dinámica (heap) en T1_Get_Private_Dict en type1/t1parse.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.1","matchCriteriaId":"6229BC68-7A96-4AA6-ACE9-6FD89C24B203"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/type1/t1parse.c?id=7962a15d64c876870ca0ae435ea2467d9be268d9","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:4254","source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?45955","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4126-2/","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/type1/t1parse.c?id=7962a15d64c876870ca0ae435ea2467d9be268d9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:4254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?45955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4126-2/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-9382","sourceIdentifier":"cve@mitre.org","published":"2019-09-03T05:15:10.823","lastModified":"2026-06-17T00:36:24.340","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation."},{"lang":"es","value":"FreeType en versiones anteriores a la. 6.1 tiene una sobrelectura de búfer en skip_comment en psaux/psobjs.c porque ps_parser_skip_PS_token se controla incorrectamente en una operación FT_New_Memory_Face."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.1","matchCriteriaId":"6229BC68-7A96-4AA6-ACE9-6FD89C24B203"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/psaux/psobjs.c?id=db5a4a9ae7b0048f033361744421da8569642f73","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:4254","source":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?45922","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4126-2/","source":"cve@mitre.org"},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/psaux/psobjs.c?id=db5a4a9ae7b0048f033361744421da8569642f73","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:4254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?45922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4126-2/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2015-9383","sourceIdentifier":"cve@mitre.org","published":"2019-09-03T05:15:10.887","lastModified":"2026-06-17T00:36:24.463","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c."},{"lang":"es","value":"FreeType en versiones anteriores a la 2.6.2 tiene una sobrelectura de búfer basada en memoria dinámica (heap) en tt_cmap14_validate en sfnt/ttcmap.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.2","matchCriteriaId":"96E82FA7-DA3E-4125-9710-1D201B3AED8A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*","matchCriteriaId":"CB66DB75-2B16-4EBF-9B93-CE49D8086E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*","matchCriteriaId":"815D70A8-47D3-459C-A32C-9FEACA0659D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","matchCriteriaId":"7A5301BF-1402-4BE0-A0F8-69FBE79BC6D6"}]}]}],"references":[{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=57cbb8c148999ba8f14ed53435fc071ac9953afd","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?46346","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4126-1/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4126-2/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=57cbb8c148999ba8f14ed53435fc071ac9953afd","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://savannah.nongnu.org/bugs/?46346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4126-1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4126-2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2020-15999","sourceIdentifier":"chrome-cve-admin@google.com","published":"2020-11-03T03:15:14.853","lastModified":"2026-06-17T02:57:36.243","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."},{"lang":"es","value":"Un desbordamiento del búfer de la pila en Freetype en Google Chrome anterior a versión 86.0.4240.111, permitía a un atacante remoto explotar potencialmente una corrupción de pila por medio de una página HTML diseñada"}],"affected":[{"source":"chrome-cve-admin@google.com","affectedData":[{"vendor":"Google","product":"Chrome","versions":[{"version":"unspecified","lessThan":"86.0.4240.111","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6.0},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6.0}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-04T14:58:48.995301Z","id":"CVE-2020-15999","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2021-11-03","cisaActionDue":"2021-11-17","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Google Chrome FreeType Heap Buffer Overflow Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","versionEndExcluding":"86.0.4240.111","matchCriteriaId":"7E02F065-8513-48E2-AD6F-C69A04A30732"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndExcluding":"2.10.4","matchCriteriaId":"6ACB0025-9BC8-408F-AFAF-5F31D1D9AB46"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*","matchCriteriaId":"80F0FA5D-8D3B-4C0E-81E2-87998286AF33"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*","matchCriteriaId":"67E82302-4B77-44F3-97B1-24C18AC4A35D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*","matchCriteriaId":"E7CF3019-975D-40BB-A8A4-894E62BD3797"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html","source":"chrome-cve-admin@google.com","tags":["Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2020/Nov/33","source":"chrome-cve-admin@google.com","tags":["Mailing List","Not Applicable","Third Party Advisory"]},{"url":"https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html","source":"chrome-cve-admin@google.com","tags":["Third Party Advisory"]},{"url":"https://crbug.com/1139963","source":"chrome-cve-admin@google.com","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html","source":"chrome-cve-admin@google.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/","source":"chrome-cve-admin@google.com","tags":["Release Notes"]},{"url":"https://security.gentoo.org/glsa/202011-12","source":"chrome-cve-admin@google.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202012-04","source":"chrome-cve-admin@google.com","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202401-19","source":"chrome-cve-admin@google.com","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4824","source":"chrome-cve-admin@google.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2020/Nov/33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Not Applicable","Third Party Advisory"]},{"url":"https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://crbug.com/1139963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"https://security.gentoo.org/glsa/202011-12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202012-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202401-19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240812-0001/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-15999","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2022-27404","sourceIdentifier":"cve@mitre.org","published":"2022-04-22T14:15:09.423","lastModified":"2026-06-17T04:36:59.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face."},{"lang":"es","value":"Se ha detectado que el commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f de FreeType contenía un desbordamiento del búfer de la pila por medio de la función sfnt_init_face"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.12.0","matchCriteriaId":"AE181DF7-C86E-495B-8CBC-DEA63DD8F647"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","matchCriteriaId":"A930E247-0B43-43CB-98FF-6CE7B8189835"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","matchCriteriaId":"80E516C0-98A4-4ADE-B69F-66A772E2BAAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","matchCriteriaId":"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"}]}]}],"references":[{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/issues/1138","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/202402-06","source":"cve@mitre.org"},{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/issues/1138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2022-27405","sourceIdentifier":"cve@mitre.org","published":"2022-04-22T14:15:09.483","lastModified":"2026-07-09T01:17:23.763","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request."},{"lang":"es","value":"Se ha detectado que el commit 53dfdcd8198d2b3201a23c4bad9190519ba918db de FreeType contenía una violación de segmentación por medio de la función FNT_Size_Request"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.12.0","matchCriteriaId":"AE181DF7-C86E-495B-8CBC-DEA63DD8F647"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","matchCriteriaId":"A930E247-0B43-43CB-98FF-6CE7B8189835"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","matchCriteriaId":"80E516C0-98A4-4ADE-B69F-66A772E2BAAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","matchCriteriaId":"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"}]}]}],"references":[{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/issues/1139","source":"cve@mitre.org","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/202402-06","source":"cve@mitre.org"},{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/issues/1139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2022-27406","sourceIdentifier":"cve@mitre.org","published":"2022-04-22T14:15:09.537","lastModified":"2026-07-09T01:17:23.913","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size."},{"lang":"es","value":"Se ha detectado que el commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 de FreeType contenía una violación de segmentación por medio de la función FT_Request_Size"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndExcluding":"2.12.0","matchCriteriaId":"AE181DF7-C86E-495B-8CBC-DEA63DD8F647"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","matchCriteriaId":"A930E247-0B43-43CB-98FF-6CE7B8189835"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","matchCriteriaId":"80E516C0-98A4-4ADE-B69F-66A772E2BAAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","matchCriteriaId":"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"}]}]}],"references":[{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/issues/1140","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/","source":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/202402-06","source":"cve@mitre.org"},{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/issues/1140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EFPNRKDLCXHZVYYQLQMP44UHLU32GA6Z/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FDU2FOEMCEF6WVR6ZBIH5MT5O7FAK6UP/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWQ7IB2A75MEHM63WEUXBYEC7OR5SGDY/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVC2NPKKXKP3TWJWG4ONYWNO6ZPHLA5/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TCEMWCM46PKM4U5ENRASPKQD6JDOLKRU/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202402-06","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2022-31782","sourceIdentifier":"cve@mitre.org","published":"2022-06-02T14:15:58.000","lastModified":"2026-06-17T04:46:17.993","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow."},{"lang":"es","value":"El archivo ftbench.c en los programas de demostración de FreeType versiones hasta 2.12.1, presenta un desbordamiento de búfer en la región heap de la memoria"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freedesktop:freetype_demo_programs:*:*:*:*:*:*:*:*","versionEndIncluding":"2.12.1","matchCriteriaId":"5EAF66ED-AB31-4EF5-85A1-94A826A0F044"}]}]}],"references":[{"url":"https://gitlab.freedesktop.org/freetype/freetype-demos/-/issues/8","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://gitlab.freedesktop.org/freetype/freetype-demos/-/issues/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2025-23022","sourceIdentifier":"cve@mitre.org","published":"2025-01-10T15:15:16.967","lastModified":"2026-06-17T08:51:29.553","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"FreeType 2.8.1 has a signed integer overflow in cf2_doFlex in cff/cf2intrp.c."},{"lang":"es","value":"FreeType 2.8.1 tiene un desbordamiento de entero con signo en cf2_doFlex en cff/cf2intrp.c."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"FreeType","product":"FreeType","defaultStatus":"unknown","versions":[{"version":"2.8.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":4.0,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.5,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.2,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-01-14T17:33:20.501363Z","id":"CVE-2025-23022","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cve@mitre.org","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"4961F39D-E2E7-4725-A2BC-FCD83284962E"}]}]}],"references":[{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/issues/1312","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-23022","source":"cve@mitre.org","tags":["Issue Tracking"]}]}},{"cve":{"id":"CVE-2025-27363","sourceIdentifier":"cve-assign@fb.com","published":"2025-03-11T14:15:25.427","lastModified":"2026-06-17T09:03:27.973","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting to parse font subglyph structures related to TrueType GX and variable font files. The vulnerable code assigns a signed short value to an unsigned long and then adds a static value causing it to wrap around and allocate too small of a heap buffer. The code then writes up to 6 signed long integers out of bounds relative to this buffer. This may result in arbitrary code execution. This vulnerability may have been exploited in the wild."},{"lang":"es","value":"Existe una escritura fuera de los límites en las versiones 2.13.0 y anteriores de FreeType al intentar analizar estructuras de subglifos de fuentes relacionadas con archivos de fuentes TrueType GX y variables. El código vulnerable asigna un valor short con signo a un long sin signo y luego añade un valor estático, lo que provoca un bucle y asigna un búfer de montón demasiado pequeño. El código escribe entonces hasta 6 enteros long con signo fuera de los límites en relación con este búfer. Esto puede provocar la ejecución de código arbitrario. Esta vulnerabilidad podría haber sido explotada in situ."}],"affected":[{"source":"cve-assign@fb.com","affectedData":[{"vendor":"FreeType","product":"FreeType","defaultStatus":"unaffected","versions":[{"version":"0.0.0","lessThanOrEqual":"2.13.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve-assign@fb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-07T03:55:53.843762Z","id":"CVE-2025-27363","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2025-05-06","cisaActionDue":"2025-05-27","cisaRequiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"FreeType Out-of-Bounds Write Vulnerability","weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionEndIncluding":"2.13.0","matchCriteriaId":"47088474-E5B5-4220-8F12-D664F2DED5C1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED"}]}]}],"references":[{"url":"https://www.facebook.com/security/advisories/cve-2025-27363","source":"cve-assign@fb.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/13/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/13/11","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/13/12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/13/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/13/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/13/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/14/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/14/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/14/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2025/03/14/4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2025/05/06/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/16/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2026/04/19/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"https://source.android.com/docs/security/bulletin/2025-05-01","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-27363","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2026-23865","sourceIdentifier":"cve-assign@fb.com","published":"2026-03-02T17:16:32.100","lastModified":"2026-06-17T10:22:13.563","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2."},{"lang":"es","value":"Un desbordamiento de entero en la función tt_var_load_item_variation_store de la librería Freetype en las versiones 2.13.2 y 2.13.3 puede permitir una operación de lectura fuera de límites al analizar tablas HVAR/VVAR/MVAR en fuentes variables OpenType. Este problema está solucionado en la versión 2.14.2."}],"affected":[{"source":"cve-assign@fb.com","affectedData":[{"vendor":"FreeType","product":"FreeType","defaultStatus":"affected","versions":[{"version":"2.13.2","lessThanOrEqual":"2.13.3","versionType":"semver","status":"affected"},{"version":"2.14.0","lessThanOrEqual":"2.14.1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve-assign@fb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.8,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-02T16:25:34.989518Z","id":"CVE-2026-23865","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionStartIncluding":"2.13.2","versionEndIncluding":"2.13.3","matchCriteriaId":"31E09E2F-28D3-440A-ADA4-D58EEF53733B"},{"vulnerable":true,"criteria":"cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*","versionStartIncluding":"2.14.0","versionEndIncluding":"2.14.1","matchCriteriaId":"57620D53-213B-4593-BC11-37A948627473"}]}]}],"references":[{"url":"https://gitlab.com/freetype/freetype/-/commit/fc85a255849229c024c8e65f536fe1875d84841c","source":"cve-assign@fb.com","tags":["Patch"]},{"url":"https://sourceforge.net/projects/freetype/files/freetype2/2.14.2/","source":"cve-assign@fb.com","tags":["Release Notes"]},{"url":"https://www.facebook.com/security/advisories/cve-2026-23865","source":"cve-assign@fb.com","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/03/03/8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2026-50811","sourceIdentifier":"cve@mitre.org","published":"2026-07-07T23:16:55.017","lastModified":"2026-07-09T17:02:37.960","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An out-of-bounds read vulnerability exists in FreeType 2.14.3 and versions before commit 5a280ecde6f324de0d226261036e736e0cb49a71 in src/truetype/ttgxvar.c, in the TT_Get_Var_Design implementation used by FT_Get_Var_Design_Coordinates"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-08T19:46:32.882960Z","id":"CVE-2026-50811","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-125"}]}],"references":[{"url":"https://gist.github.com/junius-sec/6dd0fb25b643f89914083a38e5e57ace","source":"cve@mitre.org"},{"url":"https://github.com/freetype/freetype/commit/5a280ecde6f324de0d226261036e736e0cb49a71","source":"cve@mitre.org"},{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/commit/5a280ecde6f324de0d226261036e736e0cb49a71","source":"cve@mitre.org"},{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/issues/1436","source":"cve@mitre.org"},{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/work_items/1436","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2026-61860","sourceIdentifier":"disclosure@vulncheck.com","published":"2026-07-15T12:18:20.937","lastModified":"2026-07-15T18:20:21.237","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and continues to use memory that was already freed. This can be triggered during image processing and may lead to a denial of service."}],"affected":[{"source":"disclosure@vulncheck.com","affectedData":[{"vendor":"ImageMagick","product":"ImageMagick","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"7.1.2-26","versionType":"semver","status":"affected"},{"version":"7.1.2-26","versionType":"semver","status":"unaffected"}]},{"vendor":"ImageMagick","product":"ImageMagick","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"6.9.13-51","versionType":"semver","status":"affected"},{"version":"6.9.13-51","versionType":"semver","status":"unaffected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"disclosure@vulncheck.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":2.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-15T12:22:09.832264Z","id":"CVE-2026-61860","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"disclosure@vulncheck.com","type":"Secondary","description":[{"lang":"en","value":"CWE-416"}]}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6jwg-7q3p-5fqm","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/imagemagick-before-26-use-after-free-via-freetype","source":"disclosure@vulncheck.com"}]}},{"cve":{"id":"CVE-2026-95512","sourceIdentifier":"secalert@redhat.com","published":"2026-10-02T09:16:45.300","lastModified":"2026-10-06T03:17:09.750","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or references a specially crafted CID-keyed font. This crafted font can cause repeated allocations and decryptions of subroutine data across multiple font dictionaries, leading to excessive memory and CPU consumption. This can result in a denial of service (DoS) for the application or service processing the font, potentially causing it to hang or terminate."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"Red Hat","product":"Red Hat Hardened Images","defaultStatus":"affected","collectionURL":"https://catalog.redhat.com/software/containers/","packageName":"freetype-main","cpes":["cpe:/a:redhat:hummingbird:1"],"versions":[{"version":"2.14.3-2.1.hum1","lessThan":"*","versionType":"rpm","status":"unaffected"}]},{"vendor":"Red Hat","product":"Red Hat build of OpenJDK 11 ELS","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"java-11-openjdk","cpes":["cpe:/a:redhat:openjdk_els:11"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"firefox","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"freetype","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"java-21-openjdk","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"java-25-openjdk","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"thunderbird","cpes":["cpe:/o:redhat:enterprise_linux:10"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"freetype","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"firefox","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"freetype","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"java-1.8.0-openjdk","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"firefox","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"freetype","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"java-17-openjdk","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"java-1.8.0-openjdk","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"java-21-openjdk","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"mingw-freetype","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"mozjs60","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"thunderbird","cpes":["cpe:/o:redhat:enterprise_linux:8"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"firefox","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"freetype","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"java-17-openjdk","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"java-1.8.0-openjdk","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"java-21-openjdk","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"java-25-openjdk","cpes":["cpe:/o:redhat:enterprise_linux:9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"thunderbird","cpes":["cpe:/o:redhat:enterprise_linux:9"]}]}],"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-06T02:29:03.358727Z","id":"CVE-2026-95512","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"secalert@redhat.com","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:74952","source":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2026-95512","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462295","source":"secalert@redhat.com"},{"url":"https://gitlab.freedesktop.org/freetype/freetype/-/commit/f3ca71c9900fe860849b3163a6e2c1e765b291d9","source":"secalert@redhat.com"}]}},{"cve":{"id":"CVE-2026-112893","sourceIdentifier":"security-advisories@github.com","published":"2026-10-19T22:17:09.350","lastModified":"2026-10-20T19:48:50.250","vulnStatus":"Undergoing Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale glyph variable. An attacker can supply a malformed font as untrusted bytes to an application that draws text with a nonzero stroke width, forcing the glyph-load failure path. This can corrupt memory or crash the process. This issue is fixed in version 13.0.0."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"python-pillow","product":"Pillow","versions":[{"version":">= 10.0.0, < 13.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Primary","description":[{"lang":"en","value":"CWE-457"},{"lang":"en","value":"CWE-763"}]}],"references":[{"url":"https://github.com/python-pillow/Pillow/commit/a7416de7f3a43128179d2cf68df3240ea8dafe13","source":"security-advisories@github.com"},{"url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0","source":"security-advisories@github.com"},{"url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-j4m9-6w36-pw47","source":"security-advisories@github.com"}]}}]}