CVE-2007-2754
freetype freetype: no CVSS score yet. EPSS 5.8% chance of exploitation in the next 30 days.
Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arbitrary code via a crafted TTF image with a negative n_points value, which leads to an integer overflow and heap-based buffer overflow.
- EPSS
- 5.8% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- freetype:freetype
References
- ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
- http://cvs.savannah.nongnu.org/viewvc/freetype2/src/truetype/ttgload.c?root=freetype&r1=1.177&r2=1.178
- http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
- http://lists.gnu.org/archive/html/freetype-devel/2007-04/msg00041.html