CVE-2009-0946

Published: 04/17/2009 00:30:00
Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.
HIGH
CVSS v2: 7.5

Status

DocFilters Release Package State Justification Comment
25.1 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
24.4 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
24.4.0 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
24.3 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
24.2.1 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
24.2 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
24.1 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
23.3 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
23.2.1 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
23.2 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
23.1 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
22.4 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
22.3 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
22.2 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
22.1 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
21.11.1 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
21.11 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
21.8.1 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.
21.8 freetype (2.6.5) Not Affected Code Not Present 2.6.5 does not match CVE configuration.

Severity score breakdown

References