// For flags

CVE-2010-2807

 

Severity Score

6.8
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

FreeType anterior a v2.4.2 utiliza incorrectametne tipos de datos entero durante la comprobación de límites, lo que permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código de su elección a través de ficheros fuente manipulados.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2010-07-22 CVE Reserved
  • 2010-08-17 CVE Published
  • 2024-02-28 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-681: Incorrect Conversion between Numeric Types
CAPEC
References (21)
URL Tag Source
http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2 Release Notes
http://secunia.com/advisories/40816 Third Party Advisory
http://secunia.com/advisories/40982 Third Party Advisory
http://secunia.com/advisories/42314 Third Party Advisory
http://secunia.com/advisories/42317 Third Party Advisory
http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view Product
http://support.apple.com/kb/HT4435 Broken Link
http://support.apple.com/kb/HT4456 Third Party Advisory
http://support.apple.com/kb/HT4457 Third Party Advisory
http://www.securityfocus.com/bid/42285 Third Party Advisory
http://www.vupen.com/english/advisories/2010/2018 Third Party Advisory
http://www.vupen.com/english/advisories/2010/2106 Third Party Advisory
http://www.vupen.com/english/advisories/2010/3045 Third Party Advisory
http://www.vupen.com/english/advisories/2010/3046 Third Party Advisory
https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019 Issue Tracking
https://savannah.nongnu.org/bugs/?30657 Issue Tracking
URL Date SRC
URL Date SRC
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=346f1867fd32dae8f56e5b482d1af98f626804ac 2021-04-06
http://marc.info/?l=oss-security&m=128111955616772&w=2 2021-04-06
URL Date SRC
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html 2021-04-06
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html 2021-04-06
http://www.ubuntu.com/usn/USN-972-1 2021-04-06
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Freetype
Search vendor "Freetype"
 Freetype
Search vendor "Freetype" for product "Freetype"
 < 2.4.2
Search vendor "Freetype" for product "Freetype" and version " < 2.4.2"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 6.06
Search vendor "Canonical" for product "Ubuntu Linux" and version "6.06"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 8.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "8.04"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 9.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "9.04"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 9.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "9.10"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 10.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "10.04"
-
Affected
Apple
Search vendor "Apple"
 Iphone Os
Search vendor "Apple" for product "Iphone Os"
 < 4.2
Search vendor "Apple" for product "Iphone Os" and version " < 4.2"
-
Affected
Apple
Search vendor "Apple"
 Mac Os X
Search vendor "Apple" for product "Mac Os X"
 < 10.6.5
Search vendor "Apple" for product "Mac Os X" and version " < 10.6.5"
-
Affected
Apple
Search vendor "Apple"
 Tvos
Search vendor "Apple" for product "Tvos"
 < 4.1.0
Search vendor "Apple" for product "Tvos" and version " < 4.1.0"
-
Affected