Detections
Analytics
FreeBSD : freetype2 -- multiple vulnerabilities (20b4f284-2bfc-11de-bdeb-0030843d3802)
critical Nessus Plugin ID 36191
Synopsis
The remote FreeBSD host is missing a security-related update.Description
Secunia reports :Some vulnerabilities have been reported in FreeType, which can be exploited by malicious people to potentially compromise an application using the library.
An integer overflow error within the 'cff_charset_compute_cids()' function in cff/cffload.c can be exploited to potentially cause a heap-based buffer overflow via a specially crafted font.
Multiple integer overflow errors within validation functions in sfnt/ttcmap.c can be exploited to bypass length validations and potentially cause buffer overflows via specially crafted fonts.
An integer overflow error within the 'ft_smooth_render_generic()' function in smooth/ftsmooth.c can be exploited to potentially cause a heap-based buffer overflow via a specially crafted font.
Solution
Update the affected package.See Also
Plugin Details
Severity: Critical
ID: 36191
File Name: freebsd_pkg_20b4f2842bfc11debdeb0030843d3802.nasl
Version: 1.14
Type: local
Family: FreeBSD Local Security Checks
Published: 4/21/2009
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:freetype2, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 4/18/2009
Vulnerability Publication Date: 4/16/2009
Reference Information
CVE: CVE-2009-0946