Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx X11 | — | Apply OS X security update 2010-007Upgrade macOS to the latest version | Dec 16, 2011 | Aug 19, 2010 |
| Centos_linux | — | Upgrade freetype-demosUpgrade freetypeUpgrade freetype-utilsUpgrade freetype-devel | Dec 1, 2016 | Aug 19, 2010 |
| Debian | — | Upgrade freetype | Jul 30, 2024 | Aug 19, 2010 |
| Gentoo Linux | — | Upgrade media-libs/freetype. | Oct 30, 2017 | Aug 19, 2010 |
| Oracle_linux | — | Upgrade freetype-demosUpgrade freetypeUpgrade freetype-devel | Oct 16, 2024 | Aug 19, 2010 |
| Suse | — | Upgrade ftdumpUpgrade freetype2-develUpgrade ftviewUpgrade ftstringUpgrade ftdiffUpgrade ftvalidUpgrade libfreetype6-32bitUpgrade ftsdfUpgrade ftbenchUpgrade ftgammaUpgrade ftlintUpgrade freetype2Upgrade libfreetype6Upgrade freetype2-32bitUpgrade freetype2-profile-tti35Upgrade ftinspectUpgrade ftgridUpgrade freetype2-x86Upgrade ftmultiUpgrade freetype2-devel-32bitUpgrade ft2demos | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade freetype | Nov 19, 2024 | Aug 19, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub