Nortel response to Sun Solaris Vulnerability in FreeType 2 Font Engine
| Description: |
Sunsolve: http://sunsolve.sun.com/search/document.do?assetkey=1-26-103171-1 Before taking any action please ensure that you are viewing the latest official version of this security advisory by referencing http://www.nortel.com/securityadvisories Sun Microsystems has recently issued Solution document 200033 (formerly Sun Alert 103171) - Security Vulnerability in FreeType 2 Font Engine May Allow Privilege Escalation Due to Heap Overflow. Some Nortel products contain this software as a component and thus are potentially affected by the vulnerabilities addressed. This bulletin provides a multi-product consolidated response for the Nortel products which are potentially affected. This bulletin addresses the following potential vulnerability: An integer overflow leading to a heap overflow vulnerability in the FreeType 2 Font Engine, which is shipped with Solaris, may affect applications that make use of this library. Depending on the application, this may allow a local or remote unprivileged user to crash the application using FreeType (which is a type of Denial of Service), or to execute arbitrary code with the privileges of the application. |
| Type: |
Security Advisories |
| Number: |
2008008603, Rev 1 |
| Status: |
Retired |
| Date: |
2008-06-03 |
