CVE-2008-1808 in FreeType
摘要 (英语)
Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.
预定
2008-04-15
披露
2008-06-16
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 42782 | FreeType 远程代码执行 | 189 | 概念验证 | 官方修复 | CVE-2008-1808 |