NVD

Id
13979  
Name
CVE-2010-2520  
Description
Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-08-19  
Modified Date
2012-12-18  
Seq
2010-2520  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
77386 13979 CVE-2010-2520 http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=888cd1843e935fe675cf2ac303116d4ed5b9d54b  View
77387 13979 CVE-2010-2520 APPLE-SA-2010-11-10-1  View
77388 13979 CVE-2010-2520 [freetype] 20100712 FreeType 2.4.0 has been released  View
77389 13979 CVE-2010-2520 [oss-security] 20100713 Multiple bugs in freetype  View
77390 13979 CVE-2010-2520 [oss-security] 20100714 Re: Multiple bugs in freetype  View
77391 13979 CVE-2010-2520 http://support.apple.com/kb/HT4435  View
77392 13979 CVE-2010-2520 DSA-2070  View
77393 13979 CVE-2010-2520 MDVSA-2010:137  View
77394 13979 CVE-2010-2520 USN-963-1  View
77395 13979 CVE-2010-2520 https://bugzilla.redhat.com/show_bug.cgi?id=613198  View
77396 13979 CVE-2010-2520 https://savannah.nongnu.org/bugs/?30361  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36357 JVNDB-2010-002137 FreeType の Ins_IUP 関数におけるヒープベースのバッファオーバーフローの脆弱性 FreeType の truetype/ttinterp.c 内にある Ins_IUP 関数には、 CVE-2010-2520 45100 CVE-2010-2520 13979 5.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002137.html 2010-08-19 2010-12-01 View