CVE-2008-1806

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

FreeType是FreeType团队开发的一个基于C语言的、高质量的且可移植的开源字体引擎库，它可用来将字符栅格化并映射成位图以及提供其他字体相关业务的支持。 FreeType中负责解析打印机字体二进制程序(PFB)格式文件的代码中存在整数溢出漏洞。PFB文件包含一个Private字典表字段，用于描述如何创建字符。在解析这个数据结构时，有漏洞的代码段从文件读取了一系列16位长度值然后相加用于分配动态缓冲区。这个加法运算的结果可能会出现整数溢出，之后导致堆溢出。如果用户受骗通过使用了该库的应用程序打开了恶

CVE-2008-1806 affects n/a n/a. No confirmed in-the-wild exploitation; assess based on exposure. FreeType是FreeType团队开发的一个基于C语言的、高质量的且可移植的开源字体引擎库，它可用来将字符栅格化并映射成位图以及提供其他字体相关业务的支持。 FreeType中负责解析打印机字体二进制程序(PFB)格式文件的代码中存在整数溢出漏洞。PFB文件包含一个Private字典表字段，用于描述如何创建字符。在解析这个数据结构时，有漏洞的代码段从文件 CVE-2008-1806 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2008-1806

I. Basic Information for CVE-2008-1806

Affected Products

II. Public POCs for CVE-2008-1806

III. Intelligence Information for CVE-2008-1806

Vendor Advisories for CVE-2008-1806 (39)

• http://support.apple.com/kb/HT3026 x_refsource_CONFIRM
• http://www.vmware.com/security/advisories/VMSA-2008-0014.html x_refsource_CONFIRM
• http://support.apple.com/kb/HT3129 x_refsource_CONFIRM
• http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html x_refsource_CONFIRM
• http://www.vmware.com/support/server/doc/releasenotes_server.html x_refsource_CONFIRM
• http://support.apple.com/kb/HT3438 x_refsource_CONFIRM
• http://www.vmware.com/support/player/doc/releasenotes_player.html x_refsource_CONFIRM
• http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html x_refsource_CONFIRM
• http://secunia.com/advisories/30766 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30600 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30721 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31823 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30740 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31856 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30967 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30819 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31707 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/33937 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31577 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31900 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31709 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/29640 vdb-entry x_refsource_BID
• http://secunia.com/advisories/30821 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31479 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31712 third-party-advisory x_refsource_SECUNIA
• http://securitytracker.com/id?1020238 vdb-entry x_refsource_SECTRACK
• http://www.ubuntu.com/usn/usn-643-1 vendor-advisory x_refsource_UBUNTU
• http://www.vupen.com/english/advisories/2008/2525 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/2423 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/1794 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/2466 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/2558 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/1876/references vdb-entry x_refsource_VUPEN
• http://security.gentoo.org/glsa/glsa-200806-10.xml vendor-advisory x_refsource_GENTOO
• http://security.gentoo.org/glsa/glsa-201209-25.xml vendor-advisory x_refsource_GENTOO
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:121 vendor-advisory x_refsource_MANDRIVA
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9321 vdb-entry signature x_refsource_OVAL
• http://www.securityfocus.com/archive/1/495497/100/0/threaded mailing-list x_refsource_BUGTRAQ
• http://www.securityfocus.com/archive/1/495869/100/0/threaded mailing-list x_refsource_BUGTRAQ

Mailing List Discussions for CVE-2008-1806 (5)

• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html vendor-advisory x_refsource_SUSE
• http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html vendor-advisory x_refsource_APPLE
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html vendor-advisory x_refsource_APPLE
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html vendor-advisory x_refsource_APPLE
• http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html mailing-list x_refsource_FULLDISC

Other References for CVE-2008-1806 (9)

• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255 x_refsource_CONFIRM
• https://issues.rpath.com/browse/RPL-2608 x_refsource_CONFIRM
• http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780 x_refsource_MISC
• http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm x_refsource_CONFIRM
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1 vendor-advisory x_refsource_SUNALERT
• http://www.redhat.com/support/errata/RHSA-2008-0558.html vendor-advisory x_refsource_REDHAT
• https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html vendor-advisory x_refsource_FEDORA
• https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html vendor-advisory x_refsource_FEDORA
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=715 third-party-advisory x_refsource_IDEFENSE

• https://www.cve.org/CVERecord?id=CVE-2008-1806

Same Patch Batch · n/a · 2008-06-16 · 31 CVEs total

Showing top 20 of 31 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2008-1806