NVD

Id
14716  
Name
CVE-2010-3311  
Description
Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an "input stream position error" issue, a different vulnerability than CVE-2010-1797.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2011-01-07  
Modified Date
2012-12-18  
Seq
2010-3311  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
81538 14716 CVE-2010-3311 SUSE-SR:2010:019  View
81539 14716 CVE-2010-3311 DSA-2116  View
81540 14716 CVE-2010-3311 MDVSA-2010:201  View
81541 14716 CVE-2010-3311 RHSA-2010:0864  View
81542 14716 CVE-2010-3311 43700  View
81543 14716 CVE-2010-3311 USN-1013-1  View
81544 14716 CVE-2010-3311 https://bugzilla.redhat.com/show_bug.cgi?id=623625  View
81545 14716 CVE-2010-3311 RHSA-2010:0736  View
81546 14716 CVE-2010-3311 RHSA-2010:0737  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33629 JVNDB-2011-003871 FreeType の libXft における整数オーバーフローの脆弱性 FreeType の libXft の base/ftstream.c には、インプットストリームポジションエラーが発生するため、整数オーバーフロー脆弱性が存在します。 CVE-2010-3311 45891 CVE-2010-3311 14716 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003871.html 2011-01-07 2012-03-27 View