Rapid7 VulnDB

SUSE Linux Security Advisory: SUSE-SR:2009:010

Back to Search

SUSE Linux Security Advisory: SUSE-SR:2009:010

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
04/16/2009
Created
07/25/2018
Added
12/12/2013
Modified
07/04/2017

Description

Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.

Solution(s)

  • suse-upgrade-apport
  • suse-upgrade-apport-crashdb-opensuse
  • suse-upgrade-apport-gtk
  • suse-upgrade-apport-qt
  • suse-upgrade-apport-retrace
  • suse-upgrade-compat-openssl097g
  • suse-upgrade-compat-openssl097g-32bit
  • suse-upgrade-compat-openssl097g-64bit
  • suse-upgrade-compat-openssl097g-x86
  • suse-upgrade-cups
  • suse-upgrade-cups-client
  • suse-upgrade-cups-devel
  • suse-upgrade-cups-libs
  • suse-upgrade-cups-libs-32bit
  • suse-upgrade-cups-libs-64bit
  • suse-upgrade-cups-libs-x86
  • suse-upgrade-evolution
  • suse-upgrade-evolution-data-server
  • suse-upgrade-evolution-data-server-32bit
  • suse-upgrade-evolution-data-server-64bit
  • suse-upgrade-evolution-data-server-devel
  • suse-upgrade-evolution-data-server-doc
  • suse-upgrade-evolution-data-server-lang
  • suse-upgrade-evolution-data-server-x86
  • suse-upgrade-evolution-devel
  • suse-upgrade-evolution-lang
  • suse-upgrade-evolution-mono-providers
  • suse-upgrade-evolution-pilot
  • suse-upgrade-freetype2
  • suse-upgrade-freetype2-32bit
  • suse-upgrade-freetype2-64bit
  • suse-upgrade-freetype2-devel
  • suse-upgrade-freetype2-devel-32bit
  • suse-upgrade-freetype2-devel-64bit
  • suse-upgrade-freetype2-x86
  • suse-upgrade-gtkhtml2
  • suse-upgrade-gtkhtml2-devel
  • suse-upgrade-gtkhtml2-lang
  • suse-upgrade-ibmjava2-jre
  • suse-upgrade-ibmjava2-sdk
  • suse-upgrade-ibmjava5-jre
  • suse-upgrade-ibmjava5-sdk
  • suse-upgrade-java-1_4_2-ibm
  • suse-upgrade-java-1_4_2-ibm-devel
  • suse-upgrade-java-1_4_2-ibm-jdbc
  • suse-upgrade-java-1_4_2-ibm-plugin
  • suse-upgrade-java-1_5_0-sun
  • suse-upgrade-java-1_5_0-sun-alsa
  • suse-upgrade-java-1_5_0-sun-demo
  • suse-upgrade-java-1_5_0-sun-devel
  • suse-upgrade-java-1_5_0-sun-jdbc
  • suse-upgrade-java-1_5_0-sun-plugin
  • suse-upgrade-java-1_5_0-sun-src
  • suse-upgrade-java-1_6_0-ibm
  • suse-upgrade-java-1_6_0-ibm-alsa
  • suse-upgrade-java-1_6_0-ibm-fonts
  • suse-upgrade-java-1_6_0-ibm-jdbc
  • suse-upgrade-java-1_6_0-ibm-plugin
  • suse-upgrade-java-1_6_0-openjdk
  • suse-upgrade-java-1_6_0-openjdk-demo
  • suse-upgrade-java-1_6_0-openjdk-devel
  • suse-upgrade-java-1_6_0-openjdk-javadoc
  • suse-upgrade-java-1_6_0-openjdk-plugin
  • suse-upgrade-java-1_6_0-openjdk-src
  • suse-upgrade-java-1_6_0-sun
  • suse-upgrade-java-1_6_0-sun-alsa
  • suse-upgrade-java-1_6_0-sun-demo
  • suse-upgrade-java-1_6_0-sun-devel
  • suse-upgrade-java-1_6_0-sun-jdbc
  • suse-upgrade-java-1_6_0-sun-plugin
  • suse-upgrade-java2
  • suse-upgrade-java2-jre
  • suse-upgrade-kdegraphics3
  • suse-upgrade-kdegraphics3-3d
  • suse-upgrade-kdegraphics3-devel
  • suse-upgrade-kdegraphics3-extra
  • suse-upgrade-kdegraphics3-fax
  • suse-upgrade-kdegraphics3-imaging
  • suse-upgrade-kdegraphics3-kamera
  • suse-upgrade-kdegraphics3-pdf
  • suse-upgrade-kdegraphics3-postscript
  • suse-upgrade-kdegraphics3-scan
  • suse-upgrade-kdegraphics3-tex
  • suse-upgrade-libopensc2
  • suse-upgrade-libopensc2-32bit
  • suse-upgrade-libopensc2-64bit
  • suse-upgrade-libopensc2-x86
  • suse-upgrade-libopenssl-devel
  • suse-upgrade-libopenssl0_9_8
  • suse-upgrade-libopenssl0_9_8-32bit
  • suse-upgrade-libopenssl0_9_8-64bit
  • suse-upgrade-libopenssl0_9_8-x86
  • suse-upgrade-libpoppler3
  • suse-upgrade-libpoppler4
  • suse-upgrade-libsoup
  • suse-upgrade-libsoup-devel
  • suse-upgrade-mozilla
  • suse-upgrade-mozilla-devel
  • suse-upgrade-mozilla-dom-inspector
  • suse-upgrade-mozilla-irc
  • suse-upgrade-mozilla-mail
  • suse-upgrade-mozilla-venkman
  • suse-upgrade-mozilla-xulrunner190
  • suse-upgrade-mozilla-xulrunner190-32bit
  • suse-upgrade-mozilla-xulrunner190-64bit
  • suse-upgrade-mozilla-xulrunner190-devel
  • suse-upgrade-mozilla-xulrunner190-gnomevfs
  • suse-upgrade-mozilla-xulrunner190-gnomevfs-32bit
  • suse-upgrade-mozilla-xulrunner190-gnomevfs-64bit
  • suse-upgrade-mozilla-xulrunner190-translations
  • suse-upgrade-mozilla-xulrunner190-translations-32bit
  • suse-upgrade-mozilla-xulrunner190-translations-64bit
  • suse-upgrade-mozilla-xulrunner190-x86
  • suse-upgrade-mozillafirefox
  • suse-upgrade-mozillafirefox-branding-upstream
  • suse-upgrade-mozillafirefox-translations
  • suse-upgrade-mozillathunderbird
  • suse-upgrade-mozillathunderbird-devel
  • suse-upgrade-mozillathunderbird-translations
  • suse-upgrade-opensc
  • suse-upgrade-opensc-32bit
  • suse-upgrade-opensc-64bit
  • suse-upgrade-opensc-devel
  • suse-upgrade-opensc-x86
  • suse-upgrade-openssl
  • suse-upgrade-openssl-32bit
  • suse-upgrade-openssl-64bit
  • suse-upgrade-openssl-certs
  • suse-upgrade-openssl-devel
  • suse-upgrade-openssl-devel-32bit
  • suse-upgrade-openssl-devel-64bit
  • suse-upgrade-openssl-doc
  • suse-upgrade-openssl-x86
  • suse-upgrade-poppler
  • suse-upgrade-poppler-devel
  • suse-upgrade-poppler-doc
  • suse-upgrade-poppler-glib
  • suse-upgrade-poppler-qt
  • suse-upgrade-poppler-qt4
  • suse-upgrade-poppler-tools
  • suse-upgrade-python-crypto
  • suse-upgrade-python-xpcom190
  • suse-upgrade-sap-aio-release
  • suse-upgrade-seamonkey
  • suse-upgrade-seamonkey-dom-inspector
  • suse-upgrade-seamonkey-irc
  • suse-upgrade-seamonkey-mail
  • suse-upgrade-seamonkey-spellchecker
  • suse-upgrade-seamonkey-venkman
  • suse-upgrade-unbound
  • suse-upgrade-unbound-devel
  • suse-upgrade-xpdf
  • suse-upgrade-xpdf-tools

References

  • suse-upgrade-apport
  • suse-upgrade-apport-crashdb-opensuse
  • suse-upgrade-apport-gtk
  • suse-upgrade-apport-qt
  • suse-upgrade-apport-retrace
  • suse-upgrade-compat-openssl097g
  • suse-upgrade-compat-openssl097g-32bit
  • suse-upgrade-compat-openssl097g-64bit
  • suse-upgrade-compat-openssl097g-x86
  • suse-upgrade-cups
  • suse-upgrade-cups-client
  • suse-upgrade-cups-devel
  • suse-upgrade-cups-libs
  • suse-upgrade-cups-libs-32bit
  • suse-upgrade-cups-libs-64bit
  • suse-upgrade-cups-libs-x86
  • suse-upgrade-evolution
  • suse-upgrade-evolution-data-server
  • suse-upgrade-evolution-data-server-32bit
  • suse-upgrade-evolution-data-server-64bit
  • suse-upgrade-evolution-data-server-devel
  • suse-upgrade-evolution-data-server-doc
  • suse-upgrade-evolution-data-server-lang
  • suse-upgrade-evolution-data-server-x86
  • suse-upgrade-evolution-devel
  • suse-upgrade-evolution-lang
  • suse-upgrade-evolution-mono-providers
  • suse-upgrade-evolution-pilot
  • suse-upgrade-freetype2
  • suse-upgrade-freetype2-32bit
  • suse-upgrade-freetype2-64bit
  • suse-upgrade-freetype2-devel
  • suse-upgrade-freetype2-devel-32bit
  • suse-upgrade-freetype2-devel-64bit
  • suse-upgrade-freetype2-x86
  • suse-upgrade-gtkhtml2
  • suse-upgrade-gtkhtml2-devel
  • suse-upgrade-gtkhtml2-lang
  • suse-upgrade-ibmjava2-jre
  • suse-upgrade-ibmjava2-sdk
  • suse-upgrade-ibmjava5-jre
  • suse-upgrade-ibmjava5-sdk
  • suse-upgrade-java-1_4_2-ibm
  • suse-upgrade-java-1_4_2-ibm-devel
  • suse-upgrade-java-1_4_2-ibm-jdbc
  • suse-upgrade-java-1_4_2-ibm-plugin
  • suse-upgrade-java-1_5_0-sun
  • suse-upgrade-java-1_5_0-sun-alsa
  • suse-upgrade-java-1_5_0-sun-demo
  • suse-upgrade-java-1_5_0-sun-devel
  • suse-upgrade-java-1_5_0-sun-jdbc
  • suse-upgrade-java-1_5_0-sun-plugin
  • suse-upgrade-java-1_5_0-sun-src
  • suse-upgrade-java-1_6_0-ibm
  • suse-upgrade-java-1_6_0-ibm-alsa
  • suse-upgrade-java-1_6_0-ibm-fonts
  • suse-upgrade-java-1_6_0-ibm-jdbc
  • suse-upgrade-java-1_6_0-ibm-plugin
  • suse-upgrade-java-1_6_0-openjdk
  • suse-upgrade-java-1_6_0-openjdk-demo
  • suse-upgrade-java-1_6_0-openjdk-devel
  • suse-upgrade-java-1_6_0-openjdk-javadoc
  • suse-upgrade-java-1_6_0-openjdk-plugin
  • suse-upgrade-java-1_6_0-openjdk-src
  • suse-upgrade-java-1_6_0-sun
  • suse-upgrade-java-1_6_0-sun-alsa
  • suse-upgrade-java-1_6_0-sun-demo
  • suse-upgrade-java-1_6_0-sun-devel
  • suse-upgrade-java-1_6_0-sun-jdbc
  • suse-upgrade-java-1_6_0-sun-plugin
  • suse-upgrade-java2
  • suse-upgrade-java2-jre
  • suse-upgrade-kdegraphics3
  • suse-upgrade-kdegraphics3-3d
  • suse-upgrade-kdegraphics3-devel
  • suse-upgrade-kdegraphics3-extra
  • suse-upgrade-kdegraphics3-fax
  • suse-upgrade-kdegraphics3-imaging
  • suse-upgrade-kdegraphics3-kamera
  • suse-upgrade-kdegraphics3-pdf
  • suse-upgrade-kdegraphics3-postscript
  • suse-upgrade-kdegraphics3-scan
  • suse-upgrade-kdegraphics3-tex
  • suse-upgrade-libopensc2
  • suse-upgrade-libopensc2-32bit
  • suse-upgrade-libopensc2-64bit
  • suse-upgrade-libopensc2-x86
  • suse-upgrade-libopenssl-devel
  • suse-upgrade-libopenssl0_9_8
  • suse-upgrade-libopenssl0_9_8-32bit
  • suse-upgrade-libopenssl0_9_8-64bit
  • suse-upgrade-libopenssl0_9_8-x86
  • suse-upgrade-libpoppler3
  • suse-upgrade-libpoppler4
  • suse-upgrade-libsoup
  • suse-upgrade-libsoup-devel
  • suse-upgrade-mozilla
  • suse-upgrade-mozilla-devel
  • suse-upgrade-mozilla-dom-inspector
  • suse-upgrade-mozilla-irc
  • suse-upgrade-mozilla-mail
  • suse-upgrade-mozilla-venkman
  • suse-upgrade-mozilla-xulrunner190
  • suse-upgrade-mozilla-xulrunner190-32bit
  • suse-upgrade-mozilla-xulrunner190-64bit
  • suse-upgrade-mozilla-xulrunner190-devel
  • suse-upgrade-mozilla-xulrunner190-gnomevfs
  • suse-upgrade-mozilla-xulrunner190-gnomevfs-32bit
  • suse-upgrade-mozilla-xulrunner190-gnomevfs-64bit
  • suse-upgrade-mozilla-xulrunner190-translations
  • suse-upgrade-mozilla-xulrunner190-translations-32bit
  • suse-upgrade-mozilla-xulrunner190-translations-64bit
  • suse-upgrade-mozilla-xulrunner190-x86
  • suse-upgrade-mozillafirefox
  • suse-upgrade-mozillafirefox-branding-upstream
  • suse-upgrade-mozillafirefox-translations
  • suse-upgrade-mozillathunderbird
  • suse-upgrade-mozillathunderbird-devel
  • suse-upgrade-mozillathunderbird-translations
  • suse-upgrade-opensc
  • suse-upgrade-opensc-32bit
  • suse-upgrade-opensc-64bit
  • suse-upgrade-opensc-devel
  • suse-upgrade-opensc-x86
  • suse-upgrade-openssl
  • suse-upgrade-openssl-32bit
  • suse-upgrade-openssl-64bit
  • suse-upgrade-openssl-certs
  • suse-upgrade-openssl-devel
  • suse-upgrade-openssl-devel-32bit
  • suse-upgrade-openssl-devel-64bit
  • suse-upgrade-openssl-doc
  • suse-upgrade-openssl-x86
  • suse-upgrade-poppler
  • suse-upgrade-poppler-devel
  • suse-upgrade-poppler-doc
  • suse-upgrade-poppler-glib
  • suse-upgrade-poppler-qt
  • suse-upgrade-poppler-qt4
  • suse-upgrade-poppler-tools
  • suse-upgrade-python-crypto
  • suse-upgrade-python-xpcom190
  • suse-upgrade-sap-aio-release
  • suse-upgrade-seamonkey
  • suse-upgrade-seamonkey-dom-inspector
  • suse-upgrade-seamonkey-irc
  • suse-upgrade-seamonkey-mail
  • suse-upgrade-seamonkey-spellchecker
  • suse-upgrade-seamonkey-venkman
  • suse-upgrade-unbound
  • suse-upgrade-unbound-devel
  • suse-upgrade-xpdf
  • suse-upgrade-xpdf-tools

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;