CVE-2010-2498
- EPSS 2.65%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 29.04.2026 01:13:23
The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly ...
CVE-2010-2499
- EPSS 3.38%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 29.04.2026 01:13:23
Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LaserWriter PS font file with a...
CVE-2010-2500
- EPSS 2.65%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 29.04.2026 01:13:23
Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVE-2010-2519
- EPSS 4.52%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 29.04.2026 01:13:23
Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a PO...
CVE-2010-2520
- EPSS 3.15%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 29.04.2026 01:13:23
Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code...
CVE-2010-2527
- EPSS 2.33%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 29.04.2026 01:13:23
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVE-2010-2497
- EPSS 2.09%
- Veröffentlicht 19.08.2010 18:00:03
- Zuletzt bearbeitet 29.04.2026 01:13:23
Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVE-2010-2547
- EPSS 15.1%
- Veröffentlicht 05.08.2010 18:17:57
- Zuletzt bearbeitet 29.04.2026 01:13:23
Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, ...
- EPSS 1.76%
- Veröffentlicht 28.07.2010 20:00:10
- Zuletzt bearbeitet 29.04.2026 01:13:23
The rendering implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2010-1205
- EPSS 14.82%
- Veröffentlicht 30.06.2010 18:30:01
- Zuletzt bearbeitet 29.04.2026 01:13:23
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.