FreeType Rendering Engine Position Value Heap Buffer Overflow Vulnerability

Bugtraq ID:	43700
Class:	Boundary Condition Error
CVE:	CVE-2010-3311
Remote:	Yes
Local:	No
Published:	Oct 04 2010 12:00AM
Updated:	May 07 2015 05:10PM
Credit:	Marc Schoenefeld
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise 11 SP1 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 S.u.S.E. openSUSE 11.3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server Redhat Enterprise Linux 5 Client Redhat Desktop 4.0 Redhat Desktop 3.0 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Gentoo Linux FreeType FreeType 2.3.6 FreeType FreeType 2.3.5 FreeType FreeType 2.3.4 FreeType FreeType 2.3.3 FreeType FreeType 2.2.10 FreeType FreeType 2.2.1 FreeType FreeType 2.1.10 FreeType FreeType 2.1.9 FreeType FreeType 2.1.7 FreeType FreeType 2.0.9 FreeType FreeType 2.0.6 FreeType FreeType 2.2 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Avaya Voice Portal 5.1 Avaya Voice Portal 5.0 SP2 Avaya Voice Portal 5.0 SP1 Avaya Voice Portal 5.0 Avaya Voice Portal 4.1 SP2 Avaya Voice Portal 4.1 SP1 Avaya Voice Portal 4.1 Avaya Voice Portal 4.0 Avaya Proactive Contact 4.1.2 Avaya Proactive Contact 4.1.1 Avaya Proactive Contact 4.2 Avaya Proactive Contact 4.1 Avaya Proactive Contact 4.0 Avaya Messaging Storage Server 5.2 Avaya Messaging Storage Server 5.1 Avaya Messaging Storage Server 5.0 Avaya Messaging Storage Server 4.0 Avaya Message Networking 5.2.1 Avaya Message Networking 5.2 Avaya Message Networking 3.1 Avaya IQ 4.1 Avaya IQ 5.1 Avaya IQ 5 Avaya Intuity AUDIX LX 2.0 SP2 Avaya Intuity AUDIX LX 2.0 SP1 Avaya Intuity AUDIX LX 2.0 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.0 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 5.2 Avaya Aura Session Manager 6.0 Avaya Aura Session Manager 5.2 Avaya Aura Session Manager 1.1 Avaya Aura Presence Services 6.0 Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 6.0 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 5.2
Not Vulnerable:	FreeType FreeType 2.4

FreeType Rendering Engine Position Value Heap Buffer Overflow Vulnerability

FreeType is prone to a heap-based buffer-overflow vulnerability.

Successful exploits may allow attackers to execute arbitrary code in the context of an application using the affected library. Failed exploit attempts will likely result in denial-of-service conditions.

FreeType Rendering Engine Position Value Heap Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

FreeType Rendering Engine Position Value Heap Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu freetype2-demos_2.3.9-5ubuntu0.4_powerpc.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.9 -5ubuntu0.4_powerpc.deb


• Ubuntu libfreetype6-dev_2.3.9-5ubuntu0.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.9-5u buntu0.4_powerpc.deb


• Ubuntu libfreetype6-udeb_2.3.9-5ubuntu0.4_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-udeb_2.3.9-5 ubuntu0.4_powerpc.udeb


• Ubuntu libfreetype6_2.3.9-5ubuntu0.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.9-5ubunt u0.4_powerpc.deb

Debian Linux 5.0 alpha

• Debian freetype2-demos_2.3.7-2+lenny4_alpha.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny4_alpha.deb


• Debian libfreetype6-dev_2.3.7-2+lenny4_alpha.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny4_alpha.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny4_alpha.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny4_alpha.udeb


• Debian libfreetype6_2.3.7-2+lenny4_alpha.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny4_alpha.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu freetype2-demos_2.3.9-5ubuntu0.4_lpia.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.9 -5ubuntu0.4_lpia.deb


• Ubuntu libfreetype6-dev_2.3.9-5ubuntu0.4_lpia.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.9-5u buntu0.4_lpia.deb


• Ubuntu libfreetype6-udeb_2.3.9-5ubuntu0.4_lpia.udeb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-udeb_2.3.9-5 ubuntu0.4_lpia.udeb


• Ubuntu libfreetype6_2.3.9-5ubuntu0.4_lpia.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.9-5ubunt u0.4_lpia.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu freetype2-demos_2.3.11-1ubuntu2.4_powerpc.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.1 1-1ubuntu2.4_powerpc.deb


• Ubuntu libfreetype6-dev_2.3.11-1ubuntu2.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.11-1 ubuntu2.4_powerpc.deb


• Ubuntu libfreetype6-udeb_2.3.11-1ubuntu2.4_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-udeb_2.3.11- 1ubuntu2.4_powerpc.udeb


• Ubuntu libfreetype6_2.3.11-1ubuntu2.4_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.11-1ubun tu2.4_powerpc.deb

Debian Linux 5.0 armel

• Debian freetype2-demos_2.3.7-2+lenny4_armel.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny4_armel.deb


• Debian libfreetype6-dev_2.3.7-2+lenny4_armel.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny4_armel.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny4_armel.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny4_armel.udeb


• Debian libfreetype6_2.3.7-2+lenny4_armel.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny4_armel.deb

Ubuntu Ubuntu Linux 9.10 ARM

• Ubuntu freetype2-demos_2.3.9-5ubuntu0.4_armel.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.9 -5ubuntu0.4_armel.deb


• Ubuntu libfreetype6-dev_2.3.9-5ubuntu0.4_armel.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.9-5u buntu0.4_armel.deb


• Ubuntu libfreetype6-udeb_2.3.9-5ubuntu0.4_armel.udeb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-udeb_2.3.9-5 ubuntu0.4_armel.udeb


• Ubuntu libfreetype6_2.3.9-5ubuntu0.4_armel.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.9-5ubunt u0.4_armel.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu freetype2-demos_2.3.9-5ubuntu0.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.3.9-5ubuntu0.4_amd64.deb


• Ubuntu libfreetype6-dev_2.3.9-5ubuntu0.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.3.9-5ubuntu0.4_amd64.deb


• Ubuntu libfreetype6-udeb_2.3.9-5ubuntu0.4_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-ud eb_2.3.9-5ubuntu0.4_amd64.udeb


• Ubuntu libfreetype6_2.3.9-5ubuntu0.4_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 3.9-5ubuntu0.4_amd64.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva lib64freetype6-2.3.7-1.5mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-devel-2.3.7-1.5mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-static-devel-2.3.7-1.5mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mips

• Debian freetype2-demos_2.3.7-2+lenny4_mips.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny4_mips.deb


• Debian libfreetype6-dev_2.3.7-2+lenny4_mips.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny4_mips.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny4_mips.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny4_mips.udeb


• Debian libfreetype6_2.3.7-2+lenny4_mips.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny4_mips.deb

Debian Linux 5.0 sparc

• Debian freetype2-demos_2.3.7-2+lenny4_sparc.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny4_sparc.deb


• Debian libfreetype6-dev_2.3.7-2+lenny4_sparc.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny4_sparc.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny4_sparc.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny4_sparc.udeb


• Debian libfreetype6_2.3.7-2+lenny4_sparc.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny4_sparc.deb

Mandriva Linux Mandrake 2009.1 x86_64

• Mandriva lib64freetype6-2.3.9-1.6mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-devel-2.3.9-1.6mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-static-devel-2.3.9-1.6mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5

• Mandriva libfreetype6-2.3.7-1.5mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.7-1.5mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.7-1.5mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian freetype2-demos_2.3.7-2+lenny4_s390.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny4_s390.deb


• Debian libfreetype6-dev_2.3.7-2+lenny4_s390.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny4_s390.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny4_s390.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny4_s390.udeb


• Debian libfreetype6_2.3.7-2+lenny4_s390.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny4_s390.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu freetype2-demos_2.3.5-1ubuntu4.8.04.6_lpia.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.5 -1ubuntu4.8.04.6_lpia.deb


• Ubuntu libfreetype6-dev_2.3.5-1ubuntu4.8.04.6_lpia.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.5-1u buntu4.8.04.6_lpia.deb


• Ubuntu libfreetype6-udeb_2.3.5-1ubuntu4.8.04.6_lpia.udeb
  http://ports.ubuntu.com/pool/universe/f/freetype/libfreetype6-udeb_2.3 .5-1ubuntu4.8.04.6_lpia.udeb


• Ubuntu libfreetype6_2.3.5-1ubuntu4.8.04.6_lpia.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.5-1ubunt u4.8.04.6_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu freetype2-demos_2.1.10-1ubuntu2.10_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.1.10-1ubuntu2.10_i386.deb


• Ubuntu libfreetype6-dev_2.1.10-1ubuntu2.10_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.1.10-1ubuntu2.10_i386.deb


• Ubuntu libfreetype6-udeb_2.1.10-1ubuntu2.10_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/libfreetype 6-udeb_2.1.10-1ubuntu2.10_i386.udeb


• Ubuntu libfreetype6_2.1.10-1ubuntu2.10_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 1.10-1ubuntu2.10_i386.deb

Debian Linux 5.0 hppa

• Debian freetype2-demos_2.3.7-2+lenny4_hppa.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny4_hppa.deb


• Debian libfreetype6-dev_2.3.7-2+lenny4_hppa.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny4_hppa.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny4_hppa.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny4_hppa.udeb


• Debian libfreetype6_2.3.7-2+lenny4_hppa.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny4_hppa.deb

Mandriva Linux Mandrake 2009.0

• Mandriva libfreetype6-2.3.7-1.5mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.7-1.5mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.7-1.5mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu freetype2-demos_2.4.2-2ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.4.2 -2ubuntu0.1_powerpc.deb


• Ubuntu libfreetype6-dev_2.4.2-2ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.4.2-2u buntu0.1_powerpc.deb


• Ubuntu libfreetype6-udeb_2.4.2-2ubuntu0.1_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-udeb_2.4.2-2 ubuntu0.1_powerpc.udeb


• Ubuntu libfreetype6_2.4.2-2ubuntu0.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.4.2-2ubunt u0.1_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu freetype2-demos_2.3.5-1ubuntu4.8.04.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.3.5-1ubuntu4.8.04.6_i386.deb


• Ubuntu libfreetype6-dev_2.3.5-1ubuntu4.8.04.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.3.5-1ubuntu4.8.04.6_i386.deb


• Ubuntu libfreetype6-udeb_2.3.5-1ubuntu4.8.04.6_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/libfreetype 6-udeb_2.3.5-1ubuntu4.8.04.6_i386.udeb


• Ubuntu libfreetype6_2.3.5-1ubuntu4.8.04.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 3.5-1ubuntu4.8.04.6_i386.deb

Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu freetype2-demos_2.3.9-5ubuntu0.4_sparc.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.9 -5ubuntu0.4_sparc.deb


• Ubuntu libfreetype6-dev_2.3.9-5ubuntu0.4_sparc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.9-5u buntu0.4_sparc.deb


• Ubuntu libfreetype6-udeb_2.3.9-5ubuntu0.4_sparc.udeb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-udeb_2.3.9-5 ubuntu0.4_sparc.udeb


• Ubuntu libfreetype6_2.3.9-5ubuntu0.4_sparc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.9-5ubunt u0.4_sparc.deb

Debian Linux 5.0 ia-64

• Debian freetype2-demos_2.3.7-2+lenny4_ia64.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny4_ia64.deb


• Debian libfreetype6-dev_2.3.7-2+lenny4_ia64.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny4_ia64.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny4_ia64.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny4_ia64.udeb


• Debian libfreetype6_2.3.7-2+lenny4_ia64.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny4_ia64.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu freetype2-demos_2.3.5-1ubuntu4.8.04.6_powerpc.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.5 -1ubuntu4.8.04.6_powerpc.deb


• Ubuntu libfreetype6-dev_2.3.5-1ubuntu4.8.04.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.5-1u buntu4.8.04.6_powerpc.deb


• Ubuntu libfreetype6-udeb_2.3.5-1ubuntu4.8.04.6_powerpc.udeb
  http://ports.ubuntu.com/pool/universe/f/freetype/libfreetype6-udeb_2.3 .5-1ubuntu4.8.04.6_powerpc.udeb


• Ubuntu libfreetype6_2.3.5-1ubuntu4.8.04.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.5-1ubunt u4.8.04.6_powerpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu freetype2-demos_2.3.5-1ubuntu4.8.04.6_sparc.deb
  http://ports.ubuntu.com/pool/universe/f/freetype/freetype2-demos_2.3.5 -1ubuntu4.8.04.6_sparc.deb


• Ubuntu libfreetype6-dev_2.3.5-1ubuntu4.8.04.6_sparc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6-dev_2.3.5-1u buntu4.8.04.6_sparc.deb


• Ubuntu libfreetype6-udeb_2.3.5-1ubuntu4.8.04.6_sparc.udeb
  http://ports.ubuntu.com/pool/universe/f/freetype/libfreetype6-udeb_2.3 .5-1ubuntu4.8.04.6_sparc.udeb


• Ubuntu libfreetype6_2.3.5-1ubuntu4.8.04.6_sparc.deb
  http://ports.ubuntu.com/pool/main/f/freetype/libfreetype6_2.3.5-1ubunt u4.8.04.6_sparc.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu freetype2-demos_2.1.10-1ubuntu2.10_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.1.10-1ubuntu2.10_sparc.deb


• Ubuntu libfreetype6-dev_2.1.10-1ubuntu2.10_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.1.10-1ubuntu2.10_sparc.deb


• Ubuntu libfreetype6-udeb_2.1.10-1ubuntu2.10_sparc.udeb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/libfreetype 6-udeb_2.1.10-1ubuntu2.10_sparc.udeb


• Ubuntu libfreetype6_2.1.10-1ubuntu2.10_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 1.10-1ubuntu2.10_sparc.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu freetype2-demos_2.3.5-1ubuntu4.8.04.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/freetype2-d emos_2.3.5-1ubuntu4.8.04.6_amd64.deb


• Ubuntu libfreetype6-dev_2.3.5-1ubuntu4.8.04.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6-de v_2.3.5-1ubuntu4.8.04.6_amd64.deb


• Ubuntu libfreetype6-udeb_2.3.5-1ubuntu4.8.04.6_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/universe/f/freetype/libfreetype 6-udeb_2.3.5-1ubuntu4.8.04.6_amd64.udeb


• Ubuntu libfreetype6_2.3.5-1ubuntu4.8.04.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/freetype/libfreetype6_2. 3.5-1ubuntu4.8.04.6_amd64.deb

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva lib64freetype6-2.3.12-1.4mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-devel-2.3.12-1.4mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-static-devel-2.3.12-1.4mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mipsel

• Debian freetype2-demos_2.3.7-2+lenny4_mipsel.deb
  http://security.debian.org/pool/updates/main/f/freetype/freetype2-demo s_2.3.7-2+lenny4_mipsel.deb


• Debian libfreetype6-dev_2.3.7-2+lenny4_mipsel.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-d ev_2.3.7-2+lenny4_mipsel.deb


• Debian libfreetype6-udeb_2.3.7-2+lenny4_mipsel.udeb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6-u deb_2.3.7-2+lenny4_mipsel.udeb


• Debian libfreetype6_2.3.7-2+lenny4_mipsel.deb
  http://security.debian.org/pool/updates/main/f/freetype/libfreetype6_2 .3.7-2+lenny4_mipsel.deb

Mandriva Linux Mandrake 2010.0

• Mandriva libfreetype6-2.3.11-1.4mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-devel-2.3.11-1.4mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libfreetype6-static-devel-2.3.11-1.4mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva lib64freetype6-2.1.10-9.13.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-devel-2.1.10-9.13.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64freetype6-static-devel-2.1.10-9.13.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

FreeType Rendering Engine Position Value Heap Buffer Overflow Vulnerability

References:

• FreeType Homepage (FreeType)
  
• ASA-2010-316 freetype security update (RHSA-2010-0737) (Avaya)