Unrated severityNVD Advisory· Published Aug 19, 2010· Updated Apr 29, 2026
CVE-2010-2497
CVE-2010-2497
Description
Integer underflow in glyph handling in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
Affected products
3- cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
12- git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/nvdPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- savannah.nongnu.org/bugs/nvdExploitIssue TrackingThird Party Advisory
- savannah.nongnu.org/bugs/nvdExploitIssue TrackingThird Party Advisory
- lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlnvdMailing ListThird Party Advisory
- lists.nongnu.org/archive/html/freetype/2010-07/msg00001.htmlnvdMailing ListRelease NotesThird Party Advisory
- marc.infonvdMailing ListThird Party Advisory
- marc.infonvdMailing ListThird Party Advisory
- secunia.com/advisories/48951nvdThird Party Advisory
- www.debian.org/security/2010/dsa-2070nvdThird Party Advisory
- www.mandriva.com/security/advisoriesnvdThird Party Advisory
- support.apple.com/kb/HT4435nvdBroken Link
News mentions
0No linked articles in our index yet.