[Bug 800595] CVE-2012-1137 freetype: heap buffer off-by-one in BDF
parsing _bdf_list_ensure() (#35643)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800595
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120227, |impact=low,public=20120227,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=4.3/AV:N/AC:M/ |stomer,cvss2=4.3/AV:N/AC:M/
|Au:N/C:N/I:N/A:P,rhel-4/fre |Au:N/C:N/I:N/A:P,rhel-4/fre
|etype=notaffected,rhel-5/fr |etype=notaffected,rhel-5/fr
|eetype=affected,rhel-6/free |eetype=affected,rhel-6/free
|type=affected,fedora-all/fr |type=notaffected,fedora-all
|eetype=affected,fedora-all/ |/freetype=affected,fedora-a
|mingw32-freetype=affected,c |ll/mingw32-freetype=affecte
|we=(CWE-122|CWE-125) |d,cwe=(CWE-122|CWE-125)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=4emi0crb2t&a=cc_unsubscribe
8 years, 7 months
[Bug 800594] CVE-2012-1136 freetype: uninitialized pointer use in
BDF parser _bdf_parse_glyphs() (#35641)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800594
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|20227,reported=20120302,sou |20227,reported=20120302,sou
|rce=customer,cvss2=6.8/AV:N |rce=customer,cvss2=6.8/AV:N
|/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
|-5/freetype=affected,rhel-6 |-5/freetype=affected,rhel-6
|/freetype=affected,fedora-a |/freetype=notaffected,fedor
|ll/freetype=affected,fedora |a-all/freetype=affected,fed
|-all/mingw32-freetype=affec |ora-all/mingw32-freetype=af
|ted,cwe=CWE-122 |fected,cwe=CWE-122
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=YkDpxeR88Y&a=cc_unsubscribe
8 years, 7 months
[Bug 800592] CVE-2012-1134 freetype: limited heap buffer overflow in
Type1 parser T1_Get_Private_Dict() (#35608)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800592
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|20223,reported=20120302,sou |20223,reported=20120302,sou
|rce=customer,cvss2=6.8/AV:N |rce=customer,cvss2=6.8/AV:N
|/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
|-5/freetype=affected,rhel-6 |-5/freetype=affected,rhel-6
|/freetype=affected,fedora-a |/freetype=notaffected,fedor
|ll/freetype=affected,fedora |a-all/freetype=affected,fed
|-all/mingw32-freetype=affec |ora-all/mingw32-freetype=af
|ted,cwe=(CWE-122|CWE-787) |fected,cwe=(CWE-122|CWE-787
| |)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=KlneaHcT2R&a=cc_unsubscribe
8 years, 7 months
[Bug 800590] CVE-2012-1132 freetype: heap buffer over-read in Type1
parser parse_subrs() (#35606)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800590
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120223, |impact=low,public=20120223,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=2.6/AV:N/AC:H/ |stomer,cvss2=2.6/AV:N/AC:H/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=affected,fedora-all/fre |ype=notaffected,fedora-all/
|etype=affected,fedora-all/m |freetype=affected,fedora-al
|ingw32-freetype=affected,cw |l/mingw32-freetype=affected
|e=(CWE-122|CWE-125) |,cwe=(CWE-122|CWE-125)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=qHsuo8wdJD&a=cc_unsubscribe
8 years, 7 months
[Bug 800589] CVE-2012-1131 freetype: incorrect type cast allowing
input sanity check bypass in ft_smooth_render_generic() (#35604)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800589
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120226, |impact=low,public=20120226,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=4.3/AV:N/AC:M/ |stomer,cvss2=4.3/AV:N/AC:M/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=affected,fedora-all/fre |ype=notaffected,fedora-all/
|etype=affected,fedora-all/m |freetype=affected,fedora-al
|ingw32-freetype=affected,cw |l/mingw32-freetype=affected
|e=CWE-704->CWE-122 |,cwe=CWE-704->CWE-122
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=p3Z79f4wCK&a=cc_unsubscribe
8 years, 7 months
[Bug 800587] CVE-2012-1130 freetype: heap buffer over-read in PCF
parser pcf_get_properties() (#35603)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800587
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120223, |impact=low,public=20120223,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=4.3/AV:N/AC:M/ |stomer,cvss2=4.3/AV:N/AC:M/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=affected,fedora-all/fre |ype=notaffected,fedora-all/
|etype=affected,fedora-all/m |freetype=affected,fedora-al
|ingw32-freetype=affected,cw |l/mingw32-freetype=affected
|e=(CWE-122|CWE-125) |,cwe=(CWE-122|CWE-125)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=5KdrsiVkvI&a=cc_unsubscribe
8 years, 7 months
[Bug 800583] CVE-2012-1127 freetype: heap buffer over-read in BDF
parsing _bdf_parse_glyphs() (#35599, #35600)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800583
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120223, |impact=low,public=20120223,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=4.3/AV:N/AC:M/ |stomer,cvss2=4.3/AV:N/AC:M/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=affected,fedora-all/fre |ype=notaffected,fedora-all/
|etype=affected,fedora-all/m |freetype=affected,fedora-al
|ingw32-freetype=affected,cw |l/mingw32-freetype=affected
|e=(CWE-122|CWE-125) |,cwe=(CWE-122|CWE-125)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=BFufRKZzBz&a=cc_unsubscribe
8 years, 7 months
[Bug 800581] CVE-2012-1126 freetype: heap buffer over-read in BDF
parsing _bdf_is_atom() (#35597, #35598)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=800581
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20120223, |impact=low,public=20120223,
|reported=20120302,source=cu |reported=20120302,source=cu
|stomer,cvss2=4.3/AV:N/AC:M/ |stomer,cvss2=4.3/AV:N/AC:M/
|Au:N/C:N/I:N/A:P,rhel-5/fre |Au:N/C:N/I:N/A:P,rhel-5/fre
|etype=affected,rhel-6/freet |etype=affected,rhel-6/freet
|ype=affected,fedora-all/fre |ype=notaffected,fedora-all/
|etype=affected,fedora-all/m |freetype=affected,fedora-al
|ingw32-freetype=affected,cw |l/mingw32-freetype=affected
|e=(CWE-122|CWE-125) |,cwe=(CWE-122|CWE-125)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=QwuJnncvBn&a=cc_unsubscribe
8 years, 7 months
[Bug 753799] CVE-2011-3439 freetype: Multiple security flaws when
loading CID-keyed Type 1 fonts
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=753799
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|11110,reported=20111114,sou |11110,reported=20111114,sou
|rce=suse,cvss2=6.8/AV:N/AC: |rce=suse,cvss2=6.8/AV:N/AC:
|M/Au:N/C:P/I:P/A:P,rhel-4/f |M/Au:N/C:P/I:P/A:P,rhel-4/f
|reetype=affected,rhel-5.6.z |reetype=affected,rhel-5.6.z
|/freetype=affected,rhel-5/f |/freetype=affected,rhel-5/f
|reetype=affected,rhel-6/fre |reetype=affected,rhel-6/fre
|etype=affected,fedora-all/f |etype=notaffected,fedora-al
|reetype=affected |l/freetype=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=pIwXIIbWEE&a=cc_unsubscribe
8 years, 7 months
[Bug 722701] CVE-2011-0226 freetype: postscript type1 font parsing
vulnerability
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=722701
Vincent Danen <vdanen(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|public=20110708,reported=20 |public=20110708,reported=20
|110715,source=internet,impa |110715,source=internet,impa
|ct=important,cvss2=6.8/AV:N |ct=important,cvss2=6.8/AV:N
|/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
|-4/freetype=notaffected,rhe |-4/freetype=notaffected,rhe
|l-5/freetype=notaffected,rh |l-5/freetype=notaffected,rh
|el-6/freetype=affected,fedo |el-6/freetype=notaffected,f
|ra-all/freetype=affected |edora-all/freetype=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=RdJdYbasEF&a=cc_unsubscribe
8 years, 7 months