Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2007-2754
Description:Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow.
Test IDs: 1.3.6.1.4.1.25623.1.0.59258   1.3.6.1.4.1.25623.1.0.58398   1.3.6.1.4.1.25623.1.0.62460   1.3.6.1.4.1.25623.1.0.64022   1.3.6.1.4.1.25623.1.0.64081   1.3.6.1.4.1.25623.1.0.66004   1.3.6.1.4.1.25623.1.0.64073   1.3.6.1.4.1.25623.1.0.59154   1.3.6.1.4.1.25623.1.0.58914   1.3.6.1.4.1.25623.1.0.58851   1.3.6.1.4.1.25623.1.0.58466   1.3.6.1.4.1.25623.1.0.59684   1.3.6.1.4.1.25623.1.0.59655   1.3.6.1.4.1.25623.1.0.58300   1.3.6.1.4.1.25623.1.0.65057   1.3.6.1.4.1.25623.1.0.62459   1.3.6.1.4.1.25623.1.0.122697  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2007-2754
http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html
http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
BugTraq ID: 24074
http://www.securityfocus.com/bid/24074
Bugtraq: 20070524 FLEA-2007-0020-1: freetype (Google Search)
http://www.securityfocus.com/archive/1/469463/100/200/threaded
Bugtraq: 20070613 FLEA-2007-0025-1: openoffice.org (Google Search)
http://www.securityfocus.com/archive/1/471286/30/6180/threaded
Cert/CC Advisory: TA09-133A
http://www.us-cert.gov/cas/techalerts/TA09-133A.html
Debian Security Information: DSA-1302 (Google Search)
http://www.debian.org/security/2007/dsa-1302
Debian Security Information: DSA-1334 (Google Search)
http://www.debian.org/security/2007/dsa-1334
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html
http://www.gentoo.org/security/en/glsa/glsa-200705-22.xml
http://www.gentoo.org/security/en/glsa/glsa-200707-02.xml
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:121
http://lists.gnu.org/archive/html/freetype-devel/2007-04/msg00041.html
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.018.html
http://osvdb.org/36509
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11325
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5532
RedHat Security Advisories: RHSA-2007:0403
http://www.redhat.com/support/errata/RHSA-2007-0403.html
RedHat Security Advisories: RHSA-2009:0329
http://www.redhat.com/support/errata/RHSA-2009-0329.html
RedHat Security Advisories: RHSA-2009:1062
http://www.redhat.com/support/errata/RHSA-2009-1062.html
http://www.securitytracker.com/id?1018088
http://secunia.com/advisories/25350
http://secunia.com/advisories/25353
http://secunia.com/advisories/25386
http://secunia.com/advisories/25463
http://secunia.com/advisories/25483
http://secunia.com/advisories/25609
http://secunia.com/advisories/25612
http://secunia.com/advisories/25654
http://secunia.com/advisories/25705
http://secunia.com/advisories/25808
http://secunia.com/advisories/25894
http://secunia.com/advisories/25905
http://secunia.com/advisories/26129
http://secunia.com/advisories/26305
http://secunia.com/advisories/28298
http://secunia.com/advisories/30161
http://secunia.com/advisories/35074
http://secunia.com/advisories/35200
http://secunia.com/advisories/35204
http://secunia.com/advisories/35233
SGI Security Advisory: 20070602-01-P
ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102967-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103171-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200033-1
SuSE Security Announcement: SUSE-SA:2007:041 (Google Search)
http://www.novell.com/linux/security/advisories/2007_41_freetype2.html
http://www.trustix.org/errata/2007/0019/
http://www.ubuntu.com/usn/usn-466-1
http://www.vupen.com/english/advisories/2007/1894
http://www.vupen.com/english/advisories/2007/2229
http://www.vupen.com/english/advisories/2008/0049
http://www.vupen.com/english/advisories/2009/1297




© 1998-2024 E-Soft Inc. All rights reserved.