NVD

Id
13297  
Name
CVE-2010-1797  
Description
Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted CFF opcodes in embedded fonts in a PDF document, as demonstrated by JailbreakMe. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-08-16  
Modified Date
2012-12-18  
Seq
2010-1797  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
73655 13297 CVE-2010-1797 http://freetype.sourceforge.net/index2.html#release-freetype-2.4.2  View
73656 13297 CVE-2010-1797 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=018f5c27813dd7eef4648fe254632ecea0c85a50  View
73657 13297 CVE-2010-1797 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=11d65e8a1f1f14e56148fd991965424d9bd1cdbc  View
73658 13297 CVE-2010-1797 APPLE-SA-2010-08-11-1  View
73659 13297 CVE-2010-1797 APPLE-SA-2010-08-11-2  View
73660 13297 CVE-2010-1797 http://sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/view  View
73661 13297 CVE-2010-1797 http://support.apple.com/kb/HT4291  View
73662 13297 CVE-2010-1797 http://support.apple.com/kb/HT4292  View
73663 13297 CVE-2010-1797 14538  View
73664 13297 CVE-2010-1797 http://www.f-secure.com/weblog/archives/00002002.html  View
73665 13297 CVE-2010-1797 42151  View
73666 13297 CVE-2010-1797 USN-972-1  View
73667 13297 CVE-2010-1797 ADV-2010-2018  View
73668 13297 CVE-2010-1797 ADV-2010-2106  View
73669 13297 CVE-2010-1797 appleios-pdf-code-execution(60856)  View
73670 13297 CVE-2010-1797 https://bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019  View
73671 13297 CVE-2010-1797 https://bugzilla.redhat.com/show_bug.cgi?id=621144  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36112 JVNDB-2010-001892 FreeType 2 における CFF フォントの処理に脆弱性 FreeType 2 には、CFF フォントの処理に脆弱性が存在します。 CVE-2010-1797 44377 CVE-2010-1797 13297 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001892.html 2010-08-09 2010-11-02 View