FreeType Compact Font Format (CFF) Multiple Stack Based Buffer Overflow Vulnerabilities

FreeType Compact Font Format (CFF) Multiple Stack Based Buffer Overflow Vulnerabilities

References:

CHANGES BETWEEN 2.4.1 and 2.4.2 (FreeType)
Fixed the crash issue caused by the new iPhone/iPad jailbreak program. (Foxit)
Foxit Reader Bugfix Page (Foxit)
FreeType Homepage (FreeType)
iOS Homepage (Apple)
iPad Homepage (Apple)
iPhone Product Page (Apple)
iPod touch Product Page (Apple)
Red Hat Bugid 621144 (Red Hat)
Security Release â?? Foxit Reader 4.1.1.0805 (Foxit)
Source now available for anyone interested (comex)
CVE-2010-1797 Buffer Overflow Vulnerability in FreeType (Oracle)
ASA-2010-300 freetype security update (RHSA-2010-0607) (Avaya)
ASA-2012-049: Multiple Vulnerabilities in Freetype Prior to 2.4.2 (Oracle Octobe (Avaya)

Privacy Statement
Copyright 2010, SecurityFocus