Description
Unspecified vulnerability in FreeType 2.3.9, and other versions before 2.4.2, allows remote attackers to cause a denial of service via vectors involving nested Standard Encoding Accented Character (aka seac) calls, related to psaux.h, cffgload.c, cffgload.h, and t1decode.c.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.vupen.com/english/advisories/2010/3045 ↗
- http://support.apple.com/kb/HT4435 ↗
- https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019 ↗
- http://support.apple.com/kb/HT4457 ↗
- http://www.securityfocus.com/bid/42621 ↗
- http://www.vupen.com/english/advisories/2010/3046 ↗
- https://rhn.redhat.com/errata/RHSA-2010-0737.html ↗
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html ↗
- http://secunia.com/advisories/42317 ↗
- http://secunia.com/advisories/42314 ↗
- http://support.apple.com/kb/HT4456 ↗
- http://secunia.com/advisories/48951 ↗
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html ↗
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html ↗
- https://rhn.redhat.com/errata/RHSA-2010-0736.html ↗