The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted font file that triggers an invalid free operation.
2010-08-19T18:00:04.000
2025-04-11T00:51:21.963
Deferred
CVSSv2: 6.8 (MEDIUM)
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | freetype | freetype | < 2.4.0 | Yes |
Operating System | canonical | ubuntu_linux | 6.06 | Yes |
Operating System | canonical | ubuntu_linux | 8.04 | Yes |
Operating System | canonical | ubuntu_linux | 9.04 | Yes |
Operating System | canonical | ubuntu_linux | 9.10 | Yes |
Operating System | canonical | ubuntu_linux | 10.04 | Yes |
Operating System | apple | mac_os_x | < 10.6.5 | Yes |
Operating System | debian | debian_linux | 5.0 | Yes |