CVE-2010-2807
- EPSS 5.19%
- Veröffentlicht 19.08.2010 18:00:05
- Zuletzt bearbeitet 11.04.2025 00:51:21
FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVE-2010-2808
- EPSS 7.8%
- Veröffentlicht 19.08.2010 18:00:05
- Zuletzt bearbeitet 11.04.2025 00:51:21
Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Adobe Typ...
CVE-2010-2498
- EPSS 2.65%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly ...
CVE-2010-2499
- EPSS 3.38%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LaserWriter PS font file with a...
CVE-2010-2500
- EPSS 2.65%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
Integer overflow in the gray_render_span function in smooth/ftgrays.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVE-2010-2519
- EPSS 4.52%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a PO...
CVE-2010-2520
- EPSS 3.15%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code...
CVE-2010-2527
- EPSS 2.33%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
Multiple buffer overflows in demo programs in FreeType before 2.4.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVE-2010-2541
- EPSS 3.21%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
Buffer overflow in ftmulti.c in the ftmulti demo program in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
CVE-2010-2805
- EPSS 5.63%
- Veröffentlicht 19.08.2010 18:00:04
- Zuletzt bearbeitet 11.04.2025 00:51:21
The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ...