CVE-2010-2806

Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service…

published August 19, 2010

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based buffer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05839 · 93.1th percentile
Published
2010-08-19T17:43Z
EPSS history
Timeline
  • 19 AUG 17:43Z
    Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service…
    cvelistv5