CVE-2010-1797
Summary
| CVE | CVE-2010-1797 |
|---|---|
| State | PUBLISHED |
| Assigner | apple |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-08-16 18:39:40 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted CFF opcodes in embedded fonts in a PDF document, as demonstrated by JailbreakMe. NOTE: some of these details are obtained from third party information. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Apple | Iphone Os | 1.0.0 | All | All | All |
| Operating System | Apple | Iphone Os | 1.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 1.0.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.0.2 | All | All | All |
| Operating System | Apple | Iphone Os | 1.0.2 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.0 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.0 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.0 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 1.1.1 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.2 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.2 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.2 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 1.1.3 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.3 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.3 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 1.1.4 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.4 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.4 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 1.1.5 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.5 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.5 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 2.0 | All | All | All |
| Operating System | Apple | Iphone Os | 2.0.0 | All | All | All |
| Operating System | Apple | Iphone Os | 2.0.0 | - | iphone | All |
| Operating System | Apple | Iphone Os | 2.0.0 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 2.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 2.0.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 2.0.1 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 2.0.2 | All | All | All |
| Operating System | Apple | Iphone Os | 2.0.2 | - | iphone | All |
| Operating System | Apple | Iphone Os | 2.0.2 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 2.1 | All | All | All |
| Operating System | Apple | Iphone Os | 2.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 2.1 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 2.1.1 | All | All | All |
| Operating System | Apple | Iphone Os | 2.2 | All | All | All |
| Operating System | Apple | Iphone Os | 2.2 | - | iphone | All |
| Operating System | Apple | Iphone Os | 2.2.1 | All | All | All |
| Operating System | Apple | Iphone Os | 2.2.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 2.2.1 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 3.0 | All | All | All |
| Operating System | Apple | Iphone Os | 3.0 | - | iphone | All |
| Operating System | Apple | Iphone Os | 3.0 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 3.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 3.0.1 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 3.1 | All | All | All |
| Operating System | Apple | Iphone Os | 3.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 3.1 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 3.1.2 | All | All | All |
| Operating System | Apple | Iphone Os | 3.1.2 | - | iphone | All |
| Operating System | Apple | Iphone Os | 3.1.2 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 3.1.3 | All | All | All |
| Operating System | Apple | Iphone Os | 3.1.3 | - | iphone | All |
| Operating System | Apple | Iphone Os | 3.2 | All | All | All |
| Operating System | Apple | Iphone Os | 3.2 | - | iphone | All |
| Operating System | Apple | Iphone Os | 3.2 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 3.2.1 | All | All | All |
| Operating System | Apple | Iphone Os | 3.2.1 | - | ipad | All |
| Operating System | Apple | Iphone Os | 4.0 | All | All | All |
| Operating System | Apple | Iphone Os | 4.0 | - | iphone | All |
| Operating System | Apple | Iphone Os | 4.0 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 4.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 4.0.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 4.0.1 | - | ipodtouch | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Apple iOS CFF Font Parsing and IOSurface Integer Overflow - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| Apple iOS for iPhone/iPad/iPod touch Privilege Escalation Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Exploit |
| USN-972-1: FreeType vulnerabilities | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | |
| The FreeType Project | af854a3a-2127-422b-91ae-364da2661108 | freetype.sourceforge.net | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Vendor Advisory |
| Browse The FreeType Project Files on SourceForge.net | af854a3a-2127-422b-91ae-364da2661108 | sourceforge.net | |
| Ubuntu update for freetype - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| FreeType Multiple Vulnerabilities - Advisories - Community | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| osvdb.org/66828 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| Bug #617019 “FreeType security fixes in 2.4.2” : Maverick (10.10) : Bugs : freetype package : Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | bugs.launchpad.net | |
| APPLE-SA-2010-08-11-2 iOS 3.2.2 Update for iPad | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | Vendor Advisory |
| Bug 621144 – CVE-2010-1797 FreeType: Multiple stack overflows by processing CFF opcodes | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| Apple iOS pdf Jailbreak Exploit | af854a3a-2127-422b-91ae-364da2661108 | www.exploit-db.com | Exploit |
| About the security content of the iOS 4.0.2 Update for iPhone and iPod touch | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | Vendor Advisory |
| freetype/freetype2.git - The FreeType 2 library | af854a3a-2127-422b-91ae-364da2661108 | git.savannah.gnu.org | |
| freetype/freetype2.git - The FreeType 2 library | af854a3a-2127-422b-91ae-364da2661108 | git.savannah.gnu.org | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Vendor Advisory |
| JailbreakMe 2.0 Uses PDF Exploit - F-Secure Weblog : News from the Lab | af854a3a-2127-422b-91ae-364da2661108 | www.f-secure.com | |
| Security Advisory SA48951 - SUSE update for freetype2 - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| APPLE-SA-2010-08-11-1 iOS 4.0.2 Update for iPhone and iPod touch | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | |
| About the security content of the iOS 3.2.2 Update for iPad | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.