Patchwire CVEs, their patch status, and feeds to follow them

CVE-2008-1808

Fixed in a distro release EPSS 4%

Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.

Published 2008-06-16 · CVE record · OSV

Products: freetype

Distro releases

ReleasePackageFixed in
Debian 12freetype2.3.6-1
Debian 13freetype2.3.6-1
Debian 14freetype2.3.6-1
Debian 4.0freetype2.2.1-5+etch3
Debian 5.0freetype2.3.5-1+lenny1
Red Hat Enterprise Linux 2.1freetype0:2.0.3-15.el21
Red Hat Enterprise Linux 2.1freetype-devel0:2.0.3-15.el21
Red Hat Enterprise Linux 2.1freetype-utils0:2.0.3-15.el21
Red Hat Enterprise Linux 3freetype0:2.1.4-10.el3
Red Hat Enterprise Linux 3freetype0:2.1.4-12.el3
Red Hat Enterprise Linux 3freetype-debuginfo0:2.1.4-10.el3
Red Hat Enterprise Linux 3freetype-debuginfo0:2.1.4-12.el3
Red Hat Enterprise Linux 3freetype-devel0:2.1.4-10.el3
Red Hat Enterprise Linux 3freetype-devel0:2.1.4-12.el3
Red Hat Enterprise Linux 4freetype0:2.1.9-10.el4.7
Red Hat Enterprise Linux 4freetype0:2.1.9-8.el4.6
Red Hat Enterprise Linux 4freetype-debuginfo0:2.1.9-8.el4.6
Red Hat Enterprise Linux 4freetype-debuginfo0:2.1.9-10.el4.7
Red Hat Enterprise Linux 4freetype-demos0:2.1.9-8.el4.6
Red Hat Enterprise Linux 4freetype-demos0:2.1.9-10.el4.7
Red Hat Enterprise Linux 4freetype-devel0:2.1.9-8.el4.6
Red Hat Enterprise Linux 4freetype-devel0:2.1.9-10.el4.7
Red Hat Enterprise Linux 4freetype-utils0:2.1.9-8.el4.6
Red Hat Enterprise Linux 4freetype-utils0:2.1.9-10.el4.7
Red Hat Enterprise Linux 5freetype0:2.2.1-20.el5_2
Red Hat Enterprise Linux 5freetype-debuginfo0:2.2.1-20.el5_2
Red Hat Enterprise Linux 5freetype-demos0:2.2.1-20.el5_2
Red Hat Enterprise Linux 5freetype-devel0:2.2.1-20.el5_2