CVE-2009-0946 Integer overflow in n/a

High 7.5 Published 17 Apr 2009 Updated 7 Aug 2024

Remote attackers can execute arbitrary code via integer overflows in FreeType when processing specially crafted font files.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2009-0946?

CVE-2009-0946 is a high-severity vulnerability in Apple Iphone Os, published on 17 Apr 2009. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.

Weakness: CWE-190

Which versions are affected by CVE-2009-0946?

It affects 9 products.

Linux distribution packages (10)

`freetype` Red Hat:enterprise_linux:5::client	All versions	`0:2.2.1-21.el5_3`
`freetype-debuginfo` Red Hat:enterprise_linux:5::client	All versions	`0:2.2.1-21.el5_3`
`freetype` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:2.2.1-21.el5_3`
`freetype-debuginfo` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:2.2.1-21.el5_3`
`freetype-demos` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:2.2.1-21.el5_3`
`freetype-devel` Red Hat:enterprise_linux:5::client_workstation	All versions	`0:2.2.1-21.el5_3`
`freetype` Red Hat:enterprise_linux:5::server	All versions	`0:2.2.1-21.el5_3`
`freetype-debuginfo` Red Hat:enterprise_linux:5::server	All versions	`0:2.2.1-21.el5_3`
`freetype-demos` Red Hat:enterprise_linux:5::server	All versions	`0:2.2.1-21.el5_3`
`freetype-devel` Red Hat:enterprise_linux:5::server	All versions	`0:2.2.1-21.el5_3`

Products include Apple Iphone Os, Apple Mac Os X, Apple Mac Os X Server, Apple Safari, Canonical Ubuntu Linux, Debian Debian Linux and 3 more.

How do I fix CVE-2009-0946?

Upgrade to a fixed version.

Is CVE-2009-0946 being exploited?

There is no known exploitation of CVE-2009-0946 in the wild and no public exploit code.

All Apple Iphone Os vulnerabilities

Sources

Also known as DEBIAN-CVE-2009-0946, DSA-1784-1, GHSA-g82w-w4fh-33xc, RHSA-2009:1061.