CVE-2008-1807— FreeType2 PFB解析代码内存破坏漏洞

一分钟漏洞结论

复制摘要 复制引用

影响对象

n/a n/a

利用判断

尚无明确在野利用证据，仍需结合暴露面评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

FreeType是FreeType团队开发的一个基于C语言的、高质量的且可移植的开源字体引擎库，它可用来将字符栅格化并映射成位图以及提供其他字体相关业务的支持。 FreeType中负责解析打印机字体二进制程序(PFB)格式文件的代码中存在内存破坏漏洞。如果用户所提供的PFB文件中包含有无效的number of axes的话，就会导致在非动态分配的内存区域调用free()函数，这可能触发内存破坏。 如果用户受骗通过使用了该库的应用程序打开了恶意的字体文件的话，就会触发这个漏洞，导致以应用程序的权限执行任意指

CVE-2008-1807 影响 n/a n/a。尚无明确在野利用证据，仍需结合暴露面评估。FreeType是FreeType团队开发的一个基于C语言的、高质量的且可移植的开源字体引擎库，它可用来将字符栅格化并映射成位图以及提供其他字体相关业务的支持。 FreeType中负责解析打印机字体二进制程序(PFB)格式文件的代码中存在内存破坏漏洞。如果用户所提供的PFB文件中包含有无效的number of axes的话，就会导致在非动态分配的内存区域调用 CVE-2008-1807 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2008-1807

一、 漏洞 CVE-2008-1807 基础信息

受影响产品

二、漏洞 CVE-2008-1807 的公开POC

三、漏洞 CVE-2008-1807 的情报信息

CVE-2008-1807 厂商安全公告 (39)

• http://support.apple.com/kb/HT3026 x_refsource_CONFIRM
• http://www.vmware.com/security/advisories/VMSA-2008-0014.html x_refsource_CONFIRM
• http://support.apple.com/kb/HT3129 x_refsource_CONFIRM
• http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html x_refsource_CONFIRM
• http://www.vmware.com/support/server/doc/releasenotes_server.html x_refsource_CONFIRM
• http://support.apple.com/kb/HT3438 x_refsource_CONFIRM
• http://www.vmware.com/support/player/doc/releasenotes_player.html x_refsource_CONFIRM
• http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html x_refsource_CONFIRM
• http://secunia.com/advisories/30766 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30600 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30721 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31823 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30740 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30967 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30819 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31856 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31707 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/33937 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31577 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31900 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31709 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/31479 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/30821 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/29641 vdb-entry x_refsource_BID
• http://secunia.com/advisories/31712 third-party-advisory x_refsource_SECUNIA
• http://securitytracker.com/id?1020239 vdb-entry x_refsource_SECTRACK
• http://www.ubuntu.com/usn/usn-643-1 vendor-advisory x_refsource_UBUNTU
• http://www.vupen.com/english/advisories/2008/2525 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/2423 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/1794 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/2466 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/1876/references vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2008/2558 vdb-entry x_refsource_VUPEN
• http://security.gentoo.org/glsa/glsa-200806-10.xml vendor-advisory x_refsource_GENTOO
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:121 vendor-advisory x_refsource_MANDRIVA
• http://security.gentoo.org/glsa/glsa-201209-25.xml vendor-advisory x_refsource_GENTOO
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9767 vdb-entry signature x_refsource_OVAL
• http://www.securityfocus.com/archive/1/495497/100/0/threaded mailing-list x_refsource_BUGTRAQ
• http://www.securityfocus.com/archive/1/495869/100/0/threaded mailing-list x_refsource_BUGTRAQ

CVE-2008-1807 邮件列表归档 (5)

• http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html vendor-advisory x_refsource_SUSE
• http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html vendor-advisory x_refsource_APPLE
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00003.html vendor-advisory x_refsource_APPLE
• http://lists.apple.com/archives/security-announce//2008/Sep/msg00004.html vendor-advisory x_refsource_APPLE
• http://lists.grok.org.uk/pipermail/full-disclosure/2008-August/064118.html mailing-list x_refsource_FULLDISC

CVE-2008-1807 其他参考 (9)

• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0255 x_refsource_CONFIRM
• https://issues.rpath.com/browse/RPL-2608 x_refsource_CONFIRM
• http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780 x_refsource_MISC
• http://support.avaya.com/elmodocs2/security/ASA-2008-318.htm x_refsource_CONFIRM
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-239006-1 vendor-advisory x_refsource_SUNALERT
• http://www.redhat.com/support/errata/RHSA-2008-0558.html vendor-advisory x_refsource_REDHAT
• https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00721.html vendor-advisory x_refsource_FEDORA
• https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00717.html vendor-advisory x_refsource_FEDORA
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=716 third-party-advisory x_refsource_IDEFENSE

• https://www.cve.org/CVERecord?id=CVE-2008-1807

同批安全公告 · n/a · 2008-06-16 · 共 31 条

显示前 20 条，共 31 条。 查看全部 → →

IV. Related Vulnerabilities

V. Comments for CVE-2008-1807