BID:24708

FreeType Bitmap Font Handling Remote Buffer Overflow Vulnerability

Info

FreeType Bitmap Font Handling Remote Buffer Overflow Vulnerability

Bugtraq ID:	24708
Class:	Boundary Condition Error
CVE:	CVE-2007-3506
Remote:	Yes
Local:	No
Published:	Jun 29 2007 12:00AM
Updated:	May 07 2015 05:37PM
Credit:	The vendor disclosed this issue.
Vulnerable:	FreeType FreeType 2.3.3 FreeType FreeType 2.2.10 FreeType FreeType 2.2.1 + OpenPKG OpenPKG E1.0-Solid + Trustix Secure Linux 3.0.5 + Trustix Secure Linux 3.0 + Trustix Secure Linux 2.2 FreeType FreeType 2.1.10 FreeType FreeType 2.1.9 FreeType FreeType 2.1.7 FreeType FreeType 2.0.9 FreeType FreeType 2.0.6 FreeType FreeType 1.3.1 FreeType FreeType 2.2 FreeType FreeType 0

Not Vulnerable:	FreeType FreeType 2.3.4

Discussion

FreeType Bitmap Font Handling Remote Buffer Overflow Vulnerability

FreeType is prone to a remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

Attackers can exploit this issue to deny access to legitimate users. Given the nature of this vulnerability, arbitrary code execution may also be possible but has not been confirmed.

Versions prior to FreeType 2.3.4 are vulnerable.

Exploit / POC

FreeType Bitmap Font Handling Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

FreeType Bitmap Font Handling Remote Buffer Overflow Vulnerability

Solution:
The vendor has released FreeType 2.3.4 to address this issue. Please see the references for more information.

FreeType FreeType 0