Detections
Analytics
SuSE 11 / 11.1 Security Update : freetype2 (SAT Patch Numbers 2914 / 2919)
high Nessus Plugin ID 50905
Language:
Synopsis
The remote SuSE 11 host is missing one or more security updates.Description
This update of freetype2 fixes several vulnerabilities that could lead to remote system compromise by executing arbitrary code with user privileges :- stack-based buffer overflow while processing CFF opcodes. (CVE-2010-1797)
- integer underflow. (CVE-2010-2497)
- invalid free. (CVE-2010-2498)
- buffer overflow. (CVE-2010-2499)
- integer overflow. (CVE-2010-2500)
- heap buffer overflow. (CVE-2010-2519)
- heap buffer overflow. (CVE-2010-2520)
- buffer overflows in the freetype demo. (CVE-2010-2527)
- buffer overflow in ftmulti demo program. (CVE-2010-2541)
- improper bounds checking. (CVE-2010-2805)
- improper bounds checking. (CVE-2010-2806)
- improper type comparisons. (CVE-2010-2807)
- memory corruption flaw by processing certain LWFN fonts.
(CVE-2010-2808)
Solution
Apply SAT patch number 2914 / 2919 as appropriate.See Also
https://bugzilla.novell.com/show_bug.cgi?id=619562
https://bugzilla.novell.com/show_bug.cgi?id=628213
https://bugzilla.novell.com/show_bug.cgi?id=629447
http://support.novell.com/security/cve/CVE-2010-1797.html
http://support.novell.com/security/cve/CVE-2010-2497.html
http://support.novell.com/security/cve/CVE-2010-2498.html
http://support.novell.com/security/cve/CVE-2010-2499.html
http://support.novell.com/security/cve/CVE-2010-2500.html
http://support.novell.com/security/cve/CVE-2010-2519.html
http://support.novell.com/security/cve/CVE-2010-2520.html
http://support.novell.com/security/cve/CVE-2010-2527.html
http://support.novell.com/security/cve/CVE-2010-2541.html
http://support.novell.com/security/cve/CVE-2010-2805.html
http://support.novell.com/security/cve/CVE-2010-2806.html
Plugin Details
Severity: High
ID: 50905
File Name: suse_11_freetype2-100812.nasl
Version: 1.14
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 12/2/2010
Updated: 1/14/2021
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.2
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:novell:suse_linux:11:freetype2-32bit, cpe:/o:novell:suse_linux:11, p-cpe:/a:novell:suse_linux:11:freetype2, p-cpe:/a:novell:suse_linux:11:freetype2-devel
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 8/12/2010
Exploitable With
CANVAS (White_Phosphorus)
Core Impact
Reference Information
CVE: CVE-2010-1797, CVE-2010-2497, CVE-2010-2498, CVE-2010-2499, CVE-2010-2500, CVE-2010-2519, CVE-2010-2520, CVE-2010-2527, CVE-2010-2541, CVE-2010-2805, CVE-2010-2806, CVE-2010-2807, CVE-2010-2808