CVE-2011-0226 Integer overflow in n/a

Critical 9.3 Published 19 Jul 2011 Updated 6 Aug 2024

Remote attackers can execute arbitrary code or cause denial of service via crafted Type 1 fonts in PDFs due to an integer signedness error in FreeType.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2011-0226?

CVE-2011-0226 is a critical vulnerability in Apple Iphone Os, published on 19 Jul 2011. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Integer signedness error in psaux/t1decode.c in FreeType before 2.4.6, as used in CoreGraphics in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Type 1 font in a PDF document, as exploited in the wild in July 2011.

Weakness: CWE-189

Which versions are affected by CVE-2011-0226?

It affects 2 products.

Linux distribution packages (4)

`freetype` Red Hat:enterprise_linux:6::server	All versions	`0:2.3.11-6.el6_1.6`
`freetype-debuginfo` Red Hat:enterprise_linux:6::server	All versions	`0:2.3.11-6.el6_1.6`
`freetype-demos` Red Hat:enterprise_linux:6::server	All versions	`0:2.3.11-6.el6_1.6`
`freetype-devel` Red Hat:enterprise_linux:6::server	All versions	`0:2.3.11-6.el6_1.6`

Products include Apple Iphone Os, Freetype Freetype.

How do I fix CVE-2011-0226?

Upgrade to a fixed version.

Is CVE-2011-0226 being exploited?

There is no known exploitation of CVE-2011-0226 in the wild and no public exploit code.

All Apple Iphone Os vulnerabilities

Sources

Also known as DEBIAN-CVE-2011-0226, DSA-2294-1, GHSA-85gm-r6vh-gfc5, RHSA-2011:1085.