CVE-2009-0946
CVE-2009-0946
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.
EPSS 8.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://secunia.com/advisories/34967
- http://support.apple.com/kb/HT3639
- http://support.apple.com/kb/HT4435
- http://secunia.com/advisories/34913
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a18788b14db60ae3673f932249cd02d33a227c4e
- http://www.vupen.com/english/advisories/2009/1621
- http://www.securityfocus.com/bid/34550
- http://support.apple.com/kb/HT3549
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:243
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
- http://www.ubuntu.com/usn/USN-767-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-270268-1
- http://secunia.com/advisories/35198
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=79972af4f0485a11dcb19551356c45245749fc5b
- http://secunia.com/advisories/35074
- http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0545ec1ca36b27cb928128870a83e5f668980bc5
- http://www.vupen.com/english/advisories/2009/1522
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
- http://www.redhat.com/support/errata/RHSA-2009-1062.html
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
- http://secunia.com/advisories/35065
- http://www.debian.org/security/2009/dsa-1784
- https://nvd.nist.gov/vuln/detail/CVE-2009-0946