cve-2011-0226
HIGH vulncheck_kev
Description
Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.
Timeline
- Published
- 2011-07-19 00:00 UTC
- Last Modified
- 2011-07-19
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
{
"cvss": 0.0,
"datePublished": "2011-07-19T00:00:00Z",
"dateUpdated": "2011-07-19T00:00:00Z",
"description": "Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.",
"dueDate": "",
"id": "CVE-2011-0226",
"kev_catalogs": [
"vulncheck"
],
"knownRansomwareCampaignUse": "Unknown",
"product": "FreeType",
"requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
"severity": "HIGH",
"source": "vulncheck_kev",
"title": "Apple iOS before 4.2.9 and 4.3.x before 4.3. CoreGraphics Remote Code Execution",
"vendor": "FreeType"
}
Enrichment data
Aggregated bundle (all enrichments)