7.5

CVE-2009-0946

Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freetype ≫ Freetype Version <= 2.3.9
Debian ≫ Debian Linux Version4.0
Debian ≫ Debian Linux Version5.0
Debian ≫ Debian Linux Version6.0
Canonical ≫ Ubuntu Linux Version6.06
Canonical ≫ Ubuntu Linux Version8.04 SwEdition-
Canonical ≫ Ubuntu Linux Version8.10
Canonical ≫ Ubuntu Linux Version9.04
Opensuse ≫ Opensuse Version10.3
Opensuse ≫ Opensuse Version11.0
Opensuse ≫ Opensuse Version11.1
Suse ≫ Linux Enterprise Server Version10 Update-
Suse ≫ Linux Enterprise Server Version11 Update-
Apple ≫ Safari Version4.0
Apple ≫ iPhone OS Version >= 1.0.0 <= 2.2.1
Apple ≫ macOS X Version >= 10.6.0 <= 10.6.4
Apple ≫ macOS X Version10.4.11
Apple ≫ macOS X Version10.5.8
Apple ≫ macOS X Server Version >= 10.6.0 <= 10.6.4
Apple ≫ macOS X Server Version10.4.11
Apple ≫ macOS X Server Version10.5.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.54% 0.944
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/35074
Third Party Advisory
http://support.apple.com/kb/HT3549
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA09-133A.html
Third Party Advisory
US Government Resource
http://www.vupen.com/english/advisories/2009/1297
Third Party Advisory
http://secunia.com/advisories/35200
Third Party Advisory
http://secunia.com/advisories/35204
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-0329.html
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-1062.html
Third Party Advisory
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
Broken Link
http://secunia.com/advisories/35379
Third Party Advisory
http://support.apple.com/kb/HT3613
Third Party Advisory
http://www.vupen.com/english/advisories/2009/1522
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/35065
Third Party Advisory
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
Third Party Advisory
Mailing List
http://support.apple.com/kb/HT3639
Third Party Advisory
http://www.vupen.com/english/advisories/2009/1621
Third Party Advisory
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
Third Party Advisory
Mailing List
http://support.apple.com/kb/HT4435
Broken Link
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0545ec1ca36b27cb928128870a83e5f668980bc5
Patch
Third Party Advisory
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=79972af4f0485a11dcb19551356c45245749fc5b
Patch
Third Party Advisory
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a18788b14db60ae3673f932249cd02d33a227c4e
Patch
Third Party Advisory
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLog
Third Party Advisory
Release Notes
http://secunia.com/advisories/34723
Third Party Advisory
http://secunia.com/advisories/34913
Third Party Advisory
http://secunia.com/advisories/34967
Third Party Advisory
http://secunia.com/advisories/35198
Third Party Advisory
http://secunia.com/advisories/35210
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200905-05.xml
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-270268-1
Broken Link
http://www.debian.org/security/2009/dsa-1784
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:243
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2009-1061.html
Third Party Advisory
http://www.securityfocus.com/bid/34550
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-767-1
Third Party Advisory
http://www.vupen.com/english/advisories/2009/1058
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=491384
Patch
Third Party Advisory
Issue Tracking
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10149
Third Party Advisory