Product: Solaris 8, Solaris 9, Solaris 10, OpenSolaris

Multiple integer overflow vulnerabilities in the FreeType 2 Font Library
(libfreetype) may affect applications that make use of this library. Depending
on the application, this vulnerability may allow a local or remote unprivileged
user to crash the application through a specially crafted font file, resulting in
a Denial of service(DOS) or to execute arbitrary code with the privileges of
the user running that application.

These issues are also described in the following document CVE-2009-0946 at :

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0946



State: Preliminary
First released: 26-Oct-2009
Permalink |

Comments:

Post a Comment:

Comments are closed for this entry.