CVE-2011-0226

Published: Jul 19, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.

Affected (58)

Products: Freetype: Freetype · Apple: Iphone Os

1 product

1 product

Configuration A

58 vulnerable

Vulnerable Software	Affected Versions
Freetype Freetype	Up to 2.4.5
Freetype Freetype	Version 2.2.10
Freetype Freetype	Version 2.2.1
Freetype Freetype	Version 2.3.0
Freetype Freetype	Version 2.3.10
Freetype Freetype	Version 2.3.11
Freetype Freetype	Version 2.3.12
Freetype Freetype	Version 2.3.1
Freetype Freetype	Version 2.3.2
Freetype Freetype	Version 2.3.3
Freetype Freetype	Version 2.3.4
Freetype Freetype	Version 2.3.5
Freetype Freetype	Version 2.3.6
Freetype Freetype	Version 2.3.7
Freetype Freetype	Version 2.3.8
Freetype Freetype	Version 2.3.9
Freetype Freetype	Version 2.4.0
Freetype Freetype	Version 2.4.1
Freetype Freetype	Version 2.4.2
Freetype Freetype	Version 2.4.3
Freetype Freetype	Version 2.4.4
Apple Iphone Os	Up to 4.2.8
Apple Iphone Os	Version 1.0.0
Apple Iphone Os	Version 1.0.1
Apple Iphone Os	Version 1.0.2
Apple Iphone Os	Version 1.1.0
Apple Iphone Os	Version 1.1.1
Apple Iphone Os	Version 1.1.2
Apple Iphone Os	Version 1.1.3
Apple Iphone Os	Version 1.1.4
Apple Iphone Os	Version 1.1.5
Apple Iphone Os	Version 2.0.0
Apple Iphone Os	Version 2.0.1
Apple Iphone Os	Version 2.0.2
Apple Iphone Os	Version 2.0
Apple Iphone Os	Version 2.1.1
Apple Iphone Os	Version 2.1
Apple Iphone Os	Version 2.2.1
Apple Iphone Os	Version 2.2
Apple Iphone Os	Version 3.0.1
Apple Iphone Os	Version 3.0
Apple Iphone Os	Version 3.1.2
Apple Iphone Os	Version 3.1.3
Apple Iphone Os	Version 3.1
Apple Iphone Os	Version 3.2.1
Apple Iphone Os	Version 3.2.2
Apple Iphone Os	Version 3.2
Apple Iphone Os	Version 4.0.1
Apple Iphone Os	Version 4.0.2
Apple Iphone Os	Version 4.0
Apple Iphone Os	Version 4.1
Apple Iphone Os	Version 4.2.1
Apple Iphone Os	Version 4.2.5
Apple Iphone Os	Version 4.2
Apple Iphone Os	Version 4.3.0
Apple Iphone Os	Version 4.3.1
Apple Iphone Os	Version 4.3.2
Apple Iphone Os	Version 4.3.3

Related CWEs

References (40)

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

Source: product-security@apple.com

http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html

Source: product-security@apple.com

Vendor Advisory

http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html

Source: product-security@apple.com

http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html

Source: product-security@apple.com

http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html

Source: product-security@apple.com

http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html

Source: product-security@apple.com

http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html

Source: product-security@apple.com

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html

Source: product-security@apple.com

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html

Source: product-security@apple.com

http://secunia.com/advisories/45167

Source: product-security@apple.com

Vendor Advisory

http://secunia.com/advisories/45224

Source: product-security@apple.com

Vendor Advisory

http://support.apple.com/kb/HT4802

Source: product-security@apple.com

Vendor Advisory

http://support.apple.com/kb/HT4803

Source: product-security@apple.com

Vendor Advisory

http://support.apple.com/kb/HT5002

Source: product-security@apple.com

http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html

Source: product-security@apple.com

http://www.debian.org/security/2011/dsa-2294

Source: product-security@apple.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:120

Source: product-security@apple.com

http://www.redhat.com/support/errata/RHSA-2011-1085.html

Source: product-security@apple.com

http://www.securityfocus.com/bid/48619

Source: product-security@apple.com

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/45167

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/45224

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.apple.com/kb/HT4802

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.apple.com/kb/HT4803

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.apple.com/kb/HT5002

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2011/dsa-2294

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:120

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-1085.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/48619

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.