CVE-2010-1797
Published Aug 16, 2010
Last updated 3 years ago
Overview
- Description
- Multiple stack-based buffer overflows in the cff_decoder_parse_charstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted CFF opcodes in embedded fonts in a PDF document, as demonstrated by JailbreakMe. NOTE: some of these details are obtained from third party information.
- Source
- product-security@apple.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-119
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.0.1:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B669868B-F358-4D5B-9D64-4A462F261553"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E28FB0CB-D636-4F85-B5F7-70EC30053925"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.0.2:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A14B31DE-AA3D-4FA2-A4F4-0A6A51AFA7FE"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.0:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4261E5C1-DC93-437E-B84F-A30380AFDC40"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.0:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "079BB54C-25FD-4B26-B171-368911960F76"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27319629-171F-42AA-A95F-2D71F78097D0"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.1:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF292FED-19A4-4031-9B1F-151C0146F3B6"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.2:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5183082C-556F-479F-9FC1-42B59BBB840B"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.2:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAC3FBF0-F128-412D-9FD5-13BB2EB92DD7"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "297F9438-0F04-4128-94A8-A504B600929E"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.3:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FFCFEA4-C5E2-4C46-B8C3-ADCDBA4B85EF"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.3:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E7AA027-8CF9-49BD-A000-82880E41D622"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8618621-F871-4531-9F6C-7D60F2BF8B75"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.4:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FA51920-223B-4DF4-802C-188F5A8B0563"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.4:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4385635D-46F2-4642-9C78-1346DC120492"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "824DED2D-FA1D-46FC-8252-6E25546DAE29"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.5:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C63C36E-1997-4F44-80AD-E665CE46A278"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.5:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20DAE911-C037-4F10-82A3-EF42D5FB71D8"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF40CDA4-4716-4815-9ED0-093FE266734C"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.0:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02BFDD6F-B9C3-42BB-A84A-828193FAA137"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A66D6DC-9A48-4BD6-9E01-0D9FF388457C"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.1:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFD4325B-A86A-4C1B-930F-56C17FB6281D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C59B8C50-BF5D-4E9A-8E5B-99B34E974B5A"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.2:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2904DEFA-7769-43DB-B3D0-B552AE8F06A6"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4CE4199-BBF5-4F42-8BBC-BD946079C912"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25A5D868-0016-44AB-80E6-E5DF91F15455"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.1:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AD5106E-CD7C-4952-A9B1-5F72D99276E6"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34346F55-4972-427B-8F96-780FA91DB95D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.2:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7235341-983F-4578-98DC-39BC278A7556"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.2.1:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA5C2D75-4019-45EB-8AF9-A850B5349507"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.2.1:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD136376-331D-494F-9D12-7E631546E8CB"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "863383DA-0BC6-4A96-835A-A96128EC0202"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.0:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A066B59B-D5C8-4AA8-9CC7-5D34F4AB88AA"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F07B3FE7-96B3-493A-A230-5642BA11FBDA"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.0.1:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FB0870F-82CF-4C97-BDC6-F0C4BBE7462D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51D3BE2B-5A01-4AD4-A436-0056B50A535D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E357722F-4976-4E47-BFB5-709480BAE267"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F43A6FEC-ECA9-44A4-AD00-FDC6F3990DC0"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A20F171-79FE-43B9-8309-B18341639FA1"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1.2:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CA92907-90C9-4BD6-8EE8-8FA6298C3D0F"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1.2:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52283848-67CC-4E4B-A849-1225F2BCBD9F"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "126EF22D-29BC-4366-97BC-B261311E6251"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1.3:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "220590DA-2B6A-4FC9-B456-3053EED9D96E"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B3DD7B3-DA4C-4B0A-A94E-6BF66B358B7D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.2:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FE3CDE8-6497-445E-A845-8A1C2A4EDEB1"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.2:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E4D3134-28BC-4C30-A9B0-559338FBBDFD"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A939B80-0AD0-48AF-81A7-370716F56639"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.2.1:-:ipad:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98C41674-370B-4CF0-817B-3843D93A10DA"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12E22AF0-2B66-425A-A1EE-4F0E3B0433E7"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.0:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "954CDDCB-AC22-448D-8ECA-CFA4DBA1BC27"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.0:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54FECD66-4216-43FC-9959-B8EA9545449C"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB34ECBE-33E8-40E1-936B-7800D2525AE6"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.0.1:-:iphone:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECE983F6-A597-4581-A254-80396B54F2D5"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.0.1:-:ipodtouch:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "586C0CB3-98E5-4CB3-8F23-27F01233D6C4"
}
],
"operator": "OR"
}
]
}
]