CVE-2011-0226
At a glance
- Source
- NVD
- EPSS
- EPSS 6.65 % · percentile 94 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- apple
- NVD status
- Modified
Description
Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.
Weaknesses (CWE)
References
- http://secunia.com/advisories/45224
- http://support.apple.com/kb/HT4803
- http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00015.html
- http://www.securityfocus.com/bid/48619
- http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00020.html
- http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html
- http://secunia.com/advisories/45167
- http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
- http://www.redhat.com/support/errata/RHSA-2011-1085.html
- http://support.apple.com/kb/HT4802
- http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html
- http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html
- http://www.debian.org/security/2011/dsa-2294
- http://support.apple.com/kb/HT5002
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:120
- http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html
- http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html
- http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 2.0 | HIGH 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2011-0252
- GCVE · GCVE-0-2011-0226
CERT-FR advisories
- CERTA-2011-AVI-564 — Multiples vulnérabilités dans Apple Mac OS X · cert.ssi.gouv.fr
- CERTA-2011-AVI-395 — Vulnérabilités dans Apple iOS · cert.ssi.gouv.fr
- CERTA-2011-ALE-004 — Vulnérabilités dans Apple iOS · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*≤ 2.4.5cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.2.10:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.3.12:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.4.0:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.4.1:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.4.2:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.4.3:*:*:*:*:*:*:*cpe:2.3:a:freetype:freetype:2.4.4:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*≤ 4.2.8cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*- +18 more
Affected products
| Product | Versions |
|---|---|
| affected n/a |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |