Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2010-3814
Deferred
More InfoOfficial Page
Source-product-security@apple.com
View Known Exploited Vulnerability (KEV) details
Published At-26 Nov, 2010 | 20:00
Updated At-11 Apr, 2025 | 00:51

Heap-based buffer overflow in the Ins_SHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document with a crafted embedded font.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.06.8MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
CPE Matches
freetype
freetype
>>freetype>>Versions up to 2.4.3(inclusive)
cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>1.3.1
cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.0.6
cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.0.9
cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.1
cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.1.3
cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.1.4
cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.1.5
cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.1.6
cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.1.7
cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.1.8
cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.1.8
cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.1.9
cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.1.10
cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.2.0
cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.2.1
cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.2.10
cpe:2.3:a:freetype:freetype:2.2.10:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.0
cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.1
cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.2
cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.3
cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.4
cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.5
cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.6
cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.7
cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.8
cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.9
cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.10
cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.11
cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.3.12
cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.4.0
cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.4.1
cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*
freetype
freetype
>>freetype>>2.4.2
cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-119Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602221product-security@apple.com
N/A
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0edf0986f3be570f5bf90ff245a85c1675f5c9a4product-security@apple.com
N/A
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlproduct-security@apple.com
Vendor Advisory
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlproduct-security@apple.com
N/A
http://secunia.com/advisories/42314product-security@apple.com
N/A
http://secunia.com/advisories/43138product-security@apple.com
N/A
http://secunia.com/advisories/48951product-security@apple.com
N/A
http://security-tracker.debian.org/tracker/CVE-2010-3814product-security@apple.com
N/A
http://support.apple.com/kb/HT4456product-security@apple.com
Vendor Advisory
http://support.apple.com/kb/HT4581product-security@apple.com
N/A
http://www.debian.org/security/2011/dsa-2155product-security@apple.com
N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2010:236product-security@apple.com
N/A
http://www.securityfocus.com/bid/44643product-security@apple.com
N/A
http://www.securitytracker.com/id?1024767product-security@apple.com
N/A
http://www.ubuntu.com/usn/USN-1013-1product-security@apple.com
N/A
http://www.vupen.com/english/advisories/2010/3046product-security@apple.com
N/A
http://www.vupen.com/english/advisories/2011/0246product-security@apple.com
N/A
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602221af854a3a-2127-422b-91ae-364da2661108
N/A
http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0edf0986f3be570f5bf90ff245a85c1675f5c9a4af854a3a-2127-422b-91ae-364da2661108
N/A
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlaf854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/42314af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/43138af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/48951af854a3a-2127-422b-91ae-364da2661108
N/A
http://security-tracker.debian.org/tracker/CVE-2010-3814af854a3a-2127-422b-91ae-364da2661108
N/A
http://support.apple.com/kb/HT4456af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://support.apple.com/kb/HT4581af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.debian.org/security/2011/dsa-2155af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2010:236af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/bid/44643af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securitytracker.com/id?1024767af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.ubuntu.com/usn/USN-1013-1af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.vupen.com/english/advisories/2010/3046af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.vupen.com/english/advisories/2011/0246af854a3a-2127-422b-91ae-364da2661108
N/A
Change History
0Changes found
Details not found