CVE-2010-3311

Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an "input stream position error" issue, a different vulnerability than CVE-2010-1797.

• freetype freetype (<= 2.3.12) • freetype freetype 1.3.1 • freetype freetype 2.0.6 • freetype freetype 2.0.9 • freetype freetype 2.1 • freetype freetype 2.1.3 • freetype freetype 2.1.4 • freetype freetype 2.1.5 • freetype freetype 2.1.6 • freetype freetype 2.1.7 • freetype freetype 2.1.8 • freetype freetype 2.1.9 • freetype freetype 2.1.10 • freetype freetype 2.2.0 • freetype freetype 2.2.1 • freetype freetype 2.2.10 • freetype freetype 2.3.0 • freetype freetype 2.3.1 • freetype freetype 2.3.2 • freetype freetype 2.3.3 • freetype freetype 2.3.4 • freetype freetype 2.3.5 • freetype freetype 2.3.6 • freetype freetype 2.3.7 • freetype freetype 2.3.8 • freetype freetype 2.3.9 • freetype freetype 2.3.10 • freetype freetype 2.3.11