[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF
parsing _bdf_parse_glyphs() (#37906)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=890088
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|21215,reported=20121224,sou |21215,reported=20121224,sou
|rce=internet,cvss2=6.8/AV:N |rce=internet,cvss2=6.8/AV:N
|/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
|-5/freetype=affected,rhel-6 |-5/freetype=affected,rhel-6
|/freetype=affected,fedora-a |/freetype=notaffected,fedor
|ll/freetype=affected,fedora |a-all/freetype=affected,fed
|-all/mingw-freetype=affecte |ora-all/mingw-freetype=affe
|d |cted
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=byx66JGLYa&a=cc_unsubscribe
8 years, 7 months
[Bug 800607] CVE-2012-1144 freetype: insufficient checking of first
outline point in TTF parser (#35689)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800607
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|20302,reported=20120302,sou |20302,reported=20120302,sou
|rce=customer,cvss2=6.8/AV:N |rce=customer,cvss2=6.8/AV:N
|/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
|-5/freetype=affected,rhel-6 |-5/freetype=affected,rhel-6
|/freetype=affected,fedora-a |/freetype=notaffected,fedor
|ll/freetype=affected,fedora |a-all/freetype=affected,fed
|-all/mingw32-freetype=affec |ora-all/mingw32-freetype=af
|ted,cwe=(CWE-122|CWE-787) |fected,cwe=(CWE-122|CWE-787
| |)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=v9mky4UIgh&a=cc_unsubscribe
8 years, 7 months
[Bug 800604] CVE-2012-1142 freetype: incorrect computation of number
of glyphs in FNT_Face_Init() for FNT/FON files (#35659)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800604
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|20301,reported=20120302,sou |20301,reported=20120302,sou
|rce=customer,cvss2=6.8/AV:N |rce=customer,cvss2=6.8/AV:N
|/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
|-5/freetype=affected,rhel-6 |-5/freetype=affected,rhel-6
|/freetype=affected,fedora-a |/freetype=notaffected,fedor
|ll/freetype=affected,fedora |a-all/freetype=affected,fed
|-all/mingw32-freetype=affec |ora-all/mingw32-freetype=af
|ted,cwe=(CWE-122|CWE-787) |fected,cwe=(CWE-122|CWE-787
| |)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=5Sj7U7AF87&a=cc_unsubscribe
8 years, 7 months
[Bug 800602] CVE-2012-1141 freetype: BDF parser _bdf_list_split()
fails to properly initialize field array (#35658)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800602
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120228, |impact=low,public=20120228,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=2.6/AV:N/AC:H/ |stomer,cvss2=2.6/AV:N/AC:H/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=affected,fedora-all/fre |ype=notaffected,fedora-all/
|etype=affected,fedora-all/m |freetype=affected,fedora-al
|ingw32-freetype=affected,cw |l/mingw32-freetype=affected
|e=(CWE-122|CWE-125) |,cwe=(CWE-122|CWE-125)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=bTZojnRvic&a=cc_unsubscribe
8 years, 7 months
[Bug 800600] CVE-2012-1140 freetype: multiple buffer over-read in PS
parser conversion functions (#35657)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800600
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120228, |impact=low,public=20120228,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=4.3/AV:N/AC:M/ |stomer,cvss2=4.3/AV:N/AC:M/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=affected,fedora-all/fre |ype=notaffected,fedora-all/
|etype=affected,fedora-all/m |freetype=affected,fedora-al
|ingw32-freetype=affected,cw |l/mingw32-freetype=affected
|e=(CWE-122|CWE-125) |,cwe=(CWE-122|CWE-125)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=qhuYcMcdbN&a=cc_unsubscribe
8 years, 7 months
[Bug 800598] CVE-2012-1139 freetype: data buffer underflow in BDF
parser _bdf_parse_glyphs() (#35656)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800598
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120228, |impact=low,public=20120228,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=2.6/AV:N/AC:H/ |stomer,cvss2=2.6/AV:N/AC:H/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=affected,fedora-all/fre |ype=notaffected,fedora-all/
|etype=affected,fedora-all/m |freetype=affected,fedora-al
|ingw32-freetype=affected,cw |l/mingw32-freetype=affected
|e=(CWE-121|CWE-125) |,cwe=(CWE-121|CWE-125)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=XwZbkdwL6Z&a=cc_unsubscribe
8 years, 7 months