CVE-2008-1808

Published: Jun 16, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.

Affected (12)

Products: Freetype: Freetype

Freetype

1 product

Freetype

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Freetype Freetype	Version 1.3.1
Freetype Freetype	Version 2.0.6
Freetype Freetype	Version 2.0.9
Freetype Freetype	Version 2.1.10
Freetype Freetype	Version 2.1.7
Freetype Freetype	Version 2.1.9
Freetype Freetype	Version 2.2.0
Freetype Freetype	Version 2.2.10
Freetype Freetype	Version 2.2.1
Freetype Freetype	Version 2.3.3
Freetype Freetype	Version 2.3.4
Freetype Freetype	Version 2.3.5

Related CWEs

CWE-189

References (118)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=717

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html

Source: cve@mitre.org

http://secunia.com/advisories/30600

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30721

Source: cve@mitre.org

http://secunia.com/advisories/30740

Source: cve@mitre.org

http://secunia.com/advisories/30766

Source: cve@mitre.org

http://secunia.com/advisories/30819

Source: cve@mitre.org

http://secunia.com/advisories/30821

Source: cve@mitre.org

http://secunia.com/advisories/30967

Source: cve@mitre.org

http://secunia.com/advisories/31479

Source: cve@mitre.org

http://secunia.com/advisories/31577

Source: cve@mitre.org

http://secunia.com/advisories/31707

Source: cve@mitre.org

http://secunia.com/advisories/31709

Source: cve@mitre.org

http://secunia.com/advisories/31711

Source: cve@mitre.org

http://secunia.com/advisories/31712

Source: cve@mitre.org

http://secunia.com/advisories/31823

Source: cve@mitre.org

http://secunia.com/advisories/31856

Source: cve@mitre.org

http://secunia.com/advisories/31900

Source: cve@mitre.org

http://secunia.com/advisories/33937

Source: cve@mitre.org

http://secunia.com/advisories/35204

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200806-10.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-201209-25.xml

Source: cve@mitre.org

http://securitytracker.com/id?1020240

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1

Source: cve@mitre.org

http://support.apple.com/kb/HT3026

Source: cve@mitre.org

http://support.apple.com/kb/HT3129

Source: cve@mitre.org

http://support.apple.com/kb/HT3438

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm

Source: cve@mitre.org

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:121

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0556.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0558.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0329.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/495497/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/495869/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/29637

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/29639

Source: cve@mitre.org

Patch

http://www.ubuntu.com/usn/usn-643-1

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2008-0014.html

Source: cve@mitre.org

http://www.vmware.com/support/player/doc/releasenotes_player.html

Source: cve@mitre.org

http://www.vmware.com/support/player2/doc/releasenotes_player2.html

Source: cve@mitre.org

http://www.vmware.com/support/server/doc/releasenotes_server.html

Source: cve@mitre.org

http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html

Source: cve@mitre.org

http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1794

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1876/references

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2423

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2466

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2525

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2558

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-2608

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11188

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=717