NVD

Id
1748  
Name
CVE-2008-1808  
Description
Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-06-16  
Modified Date
2013-05-14  
Seq
2008-1808  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
11345 1748 CVE-2008-1808 20080610 Multiple Vendor FreeType2 Multiple Heap Overflow Vulnerabilities  View
11346 1748 CVE-2008-1808 APPLE-SA-2008-09-09  View
11347 1748 CVE-2008-1808 APPLE-SA-2008-09-12  View
11348 1748 CVE-2008-1808 APPLE-SA-2009-02-12  View
11349 1748 CVE-2008-1808 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.  View
11350 1748 CVE-2008-1808 SUSE-SR:2008:014  View
11351 1748 CVE-2008-1808 oval:org.mitre.oval:def:11188  View
11352 1748 CVE-2008-1808 GLSA-200806-10  View
11353 1748 CVE-2008-1808 GLSA-201209-25  View
11354 1748 CVE-2008-1808 1020240  View
11355 1748 CVE-2008-1808 http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780  View
11356 1748 CVE-2008-1808 239006  View
11357 1748 CVE-2008-1808 http://support.apple.com/kb/HT3026  View
11358 1748 CVE-2008-1808 http://support.apple.com/kb/HT3129  View
11359 1748 CVE-2008-1808 http://support.apple.com/kb/HT3438  View
11360 1748 CVE-2008-1808 http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm  View
11361 1748 CVE-2008-1808 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255  View
11362 1748 CVE-2008-1808 MDVSA-2008:121  View
11363 1748 CVE-2008-1808 RHSA-2008:0556  View
11364 1748 CVE-2008-1808 RHSA-2008:0558  View
11365 1748 CVE-2008-1808 RHSA-2009:0329  View
11366 1748 CVE-2008-1808 20080814 rPSA-2008-0255-1 freetype  View
11367 1748 CVE-2008-1808 20080830 VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.  View
11368 1748 CVE-2008-1808 29637  View
11369 1748 CVE-2008-1808 29639  View
11370 1748 CVE-2008-1808 USN-643-1  View
11371 1748 CVE-2008-1808 http://www.vmware.com/security/advisories/VMSA-2008-0014.html  View
11372 1748 CVE-2008-1808 http://www.vmware.com/support/player/doc/releasenotes_player.html  View
11373 1748 CVE-2008-1808 http://www.vmware.com/support/player2/doc/releasenotes_player2.html  View
11374 1748 CVE-2008-1808 http://www.vmware.com/support/server/doc/releasenotes_server.html  View
11375 1748 CVE-2008-1808 http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html  View
11376 1748 CVE-2008-1808 http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html  View
11377 1748 CVE-2008-1808 ADV-2008-1794  View
11378 1748 CVE-2008-1808 ADV-2008-1876  View
11379 1748 CVE-2008-1808 ADV-2008-2423  View
11380 1748 CVE-2008-1808 ADV-2008-2466  View
11381 1748 CVE-2008-1808 ADV-2008-2525  View
11382 1748 CVE-2008-1808 ADV-2008-2558  View
11383 1748 CVE-2008-1808 https://issues.rpath.com/browse/RPL-2608  View
11384 1748 CVE-2008-1808 FEDORA-2008-5425  View
11385 1748 CVE-2008-1808 FEDORA-2008-5430  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46155 JVNDB-2008-001465 FreeType2 における一つずれエラーの脆弱性 FreeType2 には、Printer Font Binary (PFB) ファイルおよび TrueType フォント(TTF) ファイルの処理に不備が存在するため、一つずれ (off-by-one) エラーによるヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-1808 31921 CVE-2008-1808 1748 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001465.html 2008-06-17 2010-10-19 View