FreeType TT_Load_Simple_Glyph() TTF File Integer Overflow Vulnerability

FreeType TT_Load_Simple_Glyph() TTF File Integer Overflow Vulnerability

Solution:
The vendor has released a fix. Please see the references for more information.

Sun StarSuite 6 PP6

Sun 112886-08
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -112886-08-1

Sun 112887-08
Linux Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -112887-08-1

Ubuntu Ubuntu Linux 6.10 powerpc

Ubuntu Updated packages for Ubuntu 6.10 source archive
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/freetype_2.2.1. o=rig.tar.gz

Sun StarOffice 8 Update 7

Sun 120184-10
Linux Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120184-10-1

Sun 120185-11
Sparc Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120185-11-1

Sun 120186-11
x86Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -120186-11-1

Sun Solaris 8

Sun 124420-03
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -124420-03-1

Sun Solaris 10

Sun 119812-05
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119812-05-1

Sun StarSuite 7

Sun 116518-14
Linux Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116518-14-1

Sun 117073-12
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -117073-12-1

Sun StarOffice 6.0 PP7

Sun 112885-08
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -112885-08-1

Sun 112886-08
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -112886-08-1

Sun 112887-08
Linux Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -112887-08-1

Ubuntu Ubuntu Linux 7.04 i386

Ubuntu Updated packages for Ubuntu 7.04 source archive
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/freetype_2.2.1. o=rig.tar.gz

Sun StarOffice 7.0 PP10

Sun 116518-14
Linux Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116518-14-1

Sun 116519-14
Sparc Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116519-14-1

Sun 117073-12
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -117073-12-1

Sun StarSuite 6.0 PP7

Sun 112885-08
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -112885-08-1

Sun 112886-08
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -112886-08-1

Sun 112887-08
Linux Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -112887-08-1

Ubuntu Ubuntu Linux 6.10 i386

Ubuntu Updated packages for Ubuntu 6.10 source archive
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/freetype_2.2.1. o=rig.tar.gz

Ubuntu Ubuntu Linux 7.04 amd64

Ubuntu Updated packages for Ubuntu 7.04 source archive
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/freetype_2.2.1. o=rig.tar.gz

Sun StarOffice 6.0

Sun 112886-08
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -112886-08-1

Sun 112887-08
Linux Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -112887-08-1

Ubuntu Ubuntu Linux 6.06 LTS i386

Ubuntu Updated packages for Ubuntu 6.06 LTS source archive
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/freetype_2.1.10 .=orig.tar.gz

Sun StarSuite 7.0 PP10

Sun 116518-14
Linux Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116518-14-1

Sun 116519-14
Sparc Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116519-14-1

Sun 117073-12
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -117073-12-1

Ubuntu Ubuntu Linux 7.04 powerpc

Ubuntu Updated packages for Ubuntu 7.04 source archive
http://security.ubuntu.com/ubuntu/pool/main/f/freetype/freetype_2.2.1. o=rig.tar.gz

FreeType FreeType 1.3.1

FreeType ttgload.c - 1.178
http://cvs.savannah.nongnu.org/viewvc/freetype2/src/truetype/ttgload.c ?root=freetype&r1=1.177&r2=1.178&view=patch

FreeType FreeType 2.0.9

FreeType ttgload.c - 1.178
http://cvs.savannah.nongnu.org/viewvc/freetype2/src/truetype/ttgload.c ?root=freetype&r1=1.177&r2=1.178&view=patch

FreeType FreeType 2.1.7

FreeType ttgload.c - 1.178
http://cvs.savannah.nongnu.org/viewvc/freetype2/src/truetype/ttgload.c ?root=freetype&r1=1.177&r2=1.178&view=patch

FreeType FreeType 2.3.4

FreeType ttgload.c - 1.178
http://cvs.savannah.nongnu.org/viewvc/freetype2/src/truetype/ttgload.c ?root=freetype&r1=1.177&r2=1.178&view=patch

SGI ProPack 3.0 SP6

SGI Patch 10421
ftp://oss.sgi.com/projects/sgi_propack/download/