FreeType BDF Font File Parsing Remote Denial of Service Vulnerability

Bugtraq ID:	42624
Class:	Design Error
CVE:	CVE-2010-3053
Remote:	Yes
Local:	No
Published:	Aug 23 2010 12:00AM
Updated:	Apr 23 2012 05:40PM
Credit:	Marc Deslauriers
Vulnerable:	SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise 11 SP1 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 SuSE openSUSE 11.3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Gentoo Linux FreeType FreeType 2.4 FreeType FreeType 2.3.9 FreeType FreeType 2.3.6 FreeType FreeType 2.3.5 FreeType FreeType 2.3.4 FreeType FreeType 2.3.3 FreeType FreeType 2.2.10 FreeType FreeType 2.2.1 + OpenPKG OpenPKG E1.0-Solid + Trustix Secure Linux 3.0.5 + Trustix Secure Linux 3.0 + Trustix Secure Linux 2.2 FreeType FreeType 2.1.10 FreeType FreeType 2.1.9 FreeType FreeType 2.1.7 FreeType FreeType 2.0.9 FreeType FreeType 2.0.6 FreeType FreeType 1.3.1 FreeType FreeType 2.2 FreeType FreeType 0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Apple TV 2.2 Apple TV 2.1 Apple TV 2.0 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5 Apple Mac OS X 10.6 Apple Mac OS X 10.5 Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPhone 4.0.1 Apple iPhone 3.2.1 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 4.1 Apple iPhone 4.0 Apple iPhone 3.2 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple iPad 0 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.2 beta Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple Apple TV 4.0 Apple Apple TV 2.1
Not Vulnerable:	FreeType FreeType 2.4.2 Apple Mac OS X Server 10.6.5 Apple iOS 4.2 Apple Apple TV 4.1

FreeType BDF Font File Parsing Remote Denial of Service Vulnerability

FreeType is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to crash an application that uses the vulnerable library, denying service to legitimate users.

Versions prior to FreeType 2.4.2 are vulnerable.

FreeType BDF Font File Parsing Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FreeType BDF Font File Parsing Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 ia-64

• Debian freetype2-demos_2.3.7-2+lenny3_ia64.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny3_ia64.deb


• Debian libfreetype6-dev_2.3.7-2+lenny3_ia64.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny3_ia64.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny3_ia64.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny3_ia64.udeb


• Debian libfreetype6_2.3.7-2+lenny3_ia64.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny3_ia64.deb

Apple Mac OS X Server 10.6

• Apple MacOSXServUpdCombo10.6.5.dmg
  For Mac OS X Server v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

Debian Linux 5.0 alpha

• Debian freetype2-demos_2.3.7-2+lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny3_alpha.deb


• Debian libfreetype6-dev_2.3.7-2+lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny3_alpha.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny3_alpha.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny3_alpha.udeb


• Debian libfreetype6_2.3.7-2+lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny3_alpha.deb

Mandriva Linux Mandrake 2008.0

• Mandriva libfreetype6-2.3.5-2.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-2.3.5-2.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-2.3.5-2.4mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-2.3.5-2.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.5-2.2mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.5-2.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.5-2.4mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.5-2.5mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mipsel

• Debian freetype2-demos_2.3.7-2+lenny3_mipsel.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny3_mipsel.deb


• Debian libfreetype6-dev_2.3.7-2+lenny3_mipsel.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny3_mipsel.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny3_mipsel.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny3_mipsel.udeb


• Debian libfreetype6_2.3.7-2+lenny3_mipsel.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny3_mipsel.deb

Mandriva Linux Mandrake 2010.0

• Mandriva libfreetype6-2.3.11-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-2.3.11-1.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-2.3.11-1.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.11-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.11-1.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.11-1.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.11-1.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.11-1.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.11-1.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 armel

• Debian freetype2-demos_2.3.7-2+lenny3_armel.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny3_armel.deb


• Debian libfreetype6-dev_2.3.7-2+lenny3_armel.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny3_armel.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny3_armel.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny3_armel.udeb


• Debian libfreetype6_2.3.7-2+lenny3_armel.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny3_armel.deb

Apple Mac OS X 10.6

• Apple MacOSXUpdCombo10.6.5.dmg
  For Mac OS X v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

Debian Linux 5.0 mips

• Debian freetype2-demos_2.3.7-2+lenny3_mips.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny3_mips.deb


• Debian libfreetype6-dev_2.3.7-2+lenny3_mips.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny3_mips.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny3_mips.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny3_mips.udeb


• Debian libfreetype6_2.3.7-2+lenny3_mips.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny3_mips.deb

Mandriva Linux Mandrake 2009.1

• Mandriva libfreetype6-2.3.9-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-2.3.9-1.2mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-2.3.9-1.3mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-2.3.9-1.4mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-2.3.9-1.5mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.9-1.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.9-1.2mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.9-1.3mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.9-1.4mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.9-1.5mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 sparc

• Debian freetype2-demos_2.3.7-2+lenny3_sparc.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny3_sparc.deb


• Debian libfreetype6-dev_2.3.7-2+lenny3_sparc.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny3_sparc.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny3_sparc.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny3_sparc.udeb


• Debian libfreetype6_2.3.7-2+lenny3_sparc.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny3_sparc.deb

Debian Linux 5.0 ia-32

• Debian freetype2-demos_2.3.7-2+lenny3_i386.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny3_i386.deb


• Debian libfreetype6-dev_2.3.7-2+lenny3_i386.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny3_i386.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny3_i386.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny3_i386.udeb


• Debian libfreetype6_2.3.7-2+lenny3_i386.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny3_i386.deb

MandrakeSoft Enterprise Server 5

• Mandriva libfreetype6-2.3.7-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-2.3.7-1.2mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-2.3.7-1.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-2.3.7-1.4mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.7-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.7-1.2mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.7-1.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.7-1.4mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.7-1.1mdvmes5.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.7-1.2mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.7-1.3mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.7-1.4mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian freetype2-demos_2.3.7-2+lenny3_s390.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny3_s390.deb


• Debian libfreetype6-dev_2.3.7-2+lenny3_s390.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny3_s390.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny3_s390.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny3_s390.udeb


• Debian libfreetype6_2.3.7-2+lenny3_s390.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny3_s390.deb

Apple Mac OS X Server 10.6.1

• Apple MacOSXServUpdCombo10.6.5.dmg
  For Mac OS X Server v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.1

• Apple MacOSXUpdCombo10.6.5.dmg
  For Mac OS X v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.2

• Apple MacOSXServUpdCombo10.6.5.dmg
  For Mac OS X Server v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.3

• Apple MacOSXUpdCombo10.6.5.dmg
  For Mac OS X v10.6 - v10.6.3
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.4

• Apple MacOSXUpd10.6.5.dmg
  For Mac OS X v10.6.4
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.4

• Apple MacOSXServerUpd10.6.5.dmg
  For Mac OS X Server v10.6.4
  http://www.apple.com/support/downloads/

FreeType BDF Font File Parsing Remote Denial of Service Vulnerability

References:

• FreeType Homepage (FreeType)
  
• FreeType security fixes in 2.4.2 (Martin Bretschneider)