Unrated severityNVD Advisory· Published Aug 19, 2010· Updated Apr 29, 2026
CVE-2010-2519
CVE-2010-2519
Description
Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file.
Affected products
8cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
- cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
15- git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/nvdPatchThird Party Advisory
- git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/nvdPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- savannah.nongnu.org/bugs/nvdExploitIssue TrackingThird Party Advisory
- lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlnvdMailing ListThird Party Advisory
- lists.nongnu.org/archive/html/freetype/2010-07/msg00001.htmlnvdMailing ListRelease NotesThird Party Advisory
- marc.infonvdMailing ListThird Party Advisory
- marc.infonvdMailing ListThird Party Advisory
- secunia.com/advisories/48951nvdThird Party Advisory
- securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www.debian.org/security/2010/dsa-2070nvdThird Party Advisory
- www.mandriva.com/security/advisoriesnvdThird Party Advisory
- www.redhat.com/support/errata/RHSA-2010-0578.htmlnvdThird Party Advisory
- www.ubuntu.com/usn/USN-963-1nvdThird Party Advisory
- support.apple.com/kb/HT4435nvdBroken Link
News mentions
0No linked articles in our index yet.