CVE Kennung:	CVE-2010-2806
Beschreibung:	Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via negative size values for certain strings in FontType42 font files, leading to a heap-based buffer overflow.
Test Kennungen:	1.3.6.1.4.1.25623.1.0.68448   1.3.6.1.4.1.25623.1.0.68371
Querverweise:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2806 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html BugTraq ID: 42285 http://www.securityfocus.com/bid/42285 http://marc.info/?l=oss-security&m=128111955616772&w=2 RedHat Security Advisories: RHSA-2010:0736 https://rhn.redhat.com/errata/RHSA-2010-0736.html RedHat Security Advisories: RHSA-2010:0737 https://rhn.redhat.com/errata/RHSA-2010-0737.html RedHat Security Advisories: RHSA-2010:0864 http://www.redhat.com/support/errata/RHSA-2010-0864.html http://secunia.com/advisories/40816 http://secunia.com/advisories/40982 http://secunia.com/advisories/42314 http://secunia.com/advisories/42317 http://www.ubuntu.com/usn/USN-972-1 http://www.vupen.com/english/advisories/2010/2018 http://www.vupen.com/english/advisories/2010/2106 http://www.vupen.com/english/advisories/2010/3045 http://www.vupen.com/english/advisories/2010/3046