ByteOS Network

CVE Vulnerability Details :

CVE-2011-0226

PUBLISHED

More Info Official Page

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-19 Jul, 2011 | 22:00

Updated At-06 Aug, 2024 | 21:43

▼CVE Numbering Authority (CNA)

Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://secunia.com/advisories/45224	third-party-advisory x_refsource_SECUNIA
http://support.apple.com/kb/HT4803	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html	vendor-advisory x_refsource_APPLE
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html	vendor-advisory x_refsource_SUSE
http://www.securityfocus.com/bid/48619	vdb-entry x_refsource_BID
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html	mailing-list x_refsource_MLIST
http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html	vendor-advisory x_refsource_APPLE
http://secunia.com/advisories/45167	third-party-advisory x_refsource_SECUNIA
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html	vendor-advisory x_refsource_APPLE
http://www.redhat.com/support/errata/RHSA-2011-1085.html	vendor-advisory x_refsource_REDHAT
http://support.apple.com/kb/HT4802	x_refsource_CONFIRM
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html	mailing-list x_refsource_MLIST
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html	vendor-advisory x_refsource_SUSE
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html	mailing-list x_refsource_MLIST
http://www.debian.org/security/2011/dsa-2294	vendor-advisory x_refsource_DEBIAN
http://support.apple.com/kb/HT5002	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-2011:120	vendor-advisory x_refsource_MANDRIVA
http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html	x_refsource_MISC
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html	mailing-list x_refsource_MLIST
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html	mailing-list x_refsource_MLIST

Hyperlink: http://secunia.com/advisories/45224

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://support.apple.com/kb/HT4803

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://www.securityfocus.com/bid/48619

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://secunia.com/advisories/45167

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-1085.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://support.apple.com/kb/HT4802

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.debian.org/security/2011/dsa-2294

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://support.apple.com/kb/HT5002

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:120

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html

Resource:

x_refsource_MISC

Hyperlink: http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html

Resource:

mailing-list

x_refsource_MLIST

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://secunia.com/advisories/45224	third-party-advisory x_refsource_SECUNIA x_transferred
http://support.apple.com/kb/HT4803	x_refsource_CONFIRM x_transferred
http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html	vendor-advisory x_refsource_APPLE x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html	vendor-advisory x_refsource_SUSE x_transferred
http://www.securityfocus.com/bid/48619	vdb-entry x_refsource_BID x_transferred
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html	mailing-list x_refsource_MLIST x_transferred
http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html	vendor-advisory x_refsource_APPLE x_transferred
http://secunia.com/advisories/45167	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.redhat.com/support/errata/RHSA-2011-1085.html	vendor-advisory x_refsource_REDHAT x_transferred
http://support.apple.com/kb/HT4802	x_refsource_CONFIRM x_transferred
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html	mailing-list x_refsource_MLIST x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html	vendor-advisory x_refsource_SUSE x_transferred
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html	mailing-list x_refsource_MLIST x_transferred
http://www.debian.org/security/2011/dsa-2294	vendor-advisory x_refsource_DEBIAN x_transferred
http://support.apple.com/kb/HT5002	x_refsource_CONFIRM x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2011:120	vendor-advisory x_refsource_MANDRIVA x_transferred
http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html	x_refsource_MISC x_transferred
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html	mailing-list x_refsource_MLIST x_transferred
http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html	mailing-list x_refsource_MLIST x_transferred