CVE-2007-2754
CVE-2007-2754
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow.
EPSS 5.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.vupen.com/english/advisories/2007/2229
- http://secunia.com/advisories/26129
- http://support.avaya.com/elmodocs2/security/ASA-2007-330.htm
- http://secunia.com/advisories/25612
- https://issues.rpath.com/browse/RPL-1390
- http://www.vupen.com/english/advisories/2008/0049
- http://secunia.com/advisories/25894
- http://www.debian.org/security/2007/dsa-1334
- http://secunia.com/advisories/25386
- http://secunia.com/advisories/28298
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103171-1
- http://secunia.com/advisories/25705
- http://support.apple.com/kb/HT3549
- http://cvs.savannah.nongnu.org/viewvc/freetype2/src/truetype/ttgload.c?root=freetype&r1=1.177&r2=1.178
- http://www.debian.org/security/2007/dsa-1302
- http://osvdb.org/36509
- http://www.novell.com/linux/security/advisories/2007_41_freetype2.html
- https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html
- http://secunia.com/advisories/35074
- http://secunia.com/advisories/26305
- http://www.securityfocus.com/archive/1/471286/30/6180/threaded
- https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html
- http://www.securityfocus.com/bid/24074
- https://nvd.nist.gov/vuln/detail/CVE-2007-2754