FreeBSD : freetype2 -- multiple vulnerabilities (20b4f284-2bfc-11de-bdeb-0030843d3802)

Critical Nessus Plugin ID 36191

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

Secunia reports :

Some vulnerabilities have been reported in FreeType, which can be exploited by malicious people to potentially compromise an application using the library.

An integer overflow error within the 'cff_charset_compute_cids()' function in cff/cffload.c can be exploited to potentially cause a heap-based buffer overflow via a specially crafted font.

Multiple integer overflow errors within validation functions in sfnt/ttcmap.c can be exploited to bypass length validations and potentially cause buffer overflows via specially crafted fonts.

An integer overflow error within the 'ft_smooth_render_generic()' function in smooth/ftsmooth.c can be exploited to potentially cause a heap-based buffer overflow via a specially crafted font.

Solution

Update the affected package.

See Also

http://www.nessus.org/u?20ba3cae

Plugin Details

Severity: Critical

ID: 36191

File Name: freebsd_pkg_20b4f2842bfc11debdeb0030843d3802.nasl

Version: 1.13

Type: local

Published: 2009/04/21

Updated: 2019/08/02

Dependencies: 12634

Risk Information

Risk Factor: Critical

CVSS v2.0

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:freetype2, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2009/04/18

Vulnerability Publication Date: 2009/04/16

Reference Information

CVE: CVE-2009-0946

Secunia: 34723

CWE: 189