CVE-2010-2499: apple mac_os_x Classic Buffer Overflow

CVSS: 6.8v2.0MediumModified

AliasesDEBIAN-CVE-2010-2499

Published 19-08-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-2499 is a medium (CVSS 6.8) Classic Buffer Overflow vulnerability in apple mac_os_x. EPSS estimates a 6.19% chance of exploitation in the next 30 days, higher than 93.4% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

38/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

6.19%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 2

DSA-2070-1 RHSA-2010:0578

Timeline

19-08-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LaserWriter PS font file with an embedded PFB fragment.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

6.19%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 6.19% on 22-09-2026

22-09-202622-10-2026

EPSS score

6.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (savannah.nongnu.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Affected systems

Debian2 products

freetype< 2.4.0-1
debian_linuxEOL5.0

Apple1 product

mac_os_x< 10.6.5

Canonical1 product

ubuntu_linuxEOL6.06 | 8.04 | 9.04 | 9.10 | 10.04

Freetype1 product

freetype< 2.4.0

4 vendors · 5 products

References

17 links

git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=c69891a1345640096fbf396e8dd567fe879ce233X Refsource CONFIRMPatchThird Party Advisory
savannah.nongnu.org/bugs/?30248X Refsource CONFIRMExploitIssue TrackingThird Party Advisory
www.ubuntu.com/usn/USN-963-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
support.apple.com/kb/HT4435X Refsource CONFIRMBroken Link
git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=f29f741efbba0a5ce2f16464f648fb8d026ed4c8X Refsource CONFIRMPatchThird Party Advisory
lists.nongnu.org/archive/html/freetype/2010-07/msg00001.htmlMailing ListX Refsource MLISTRelease NotesThird Party Advisory
lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
marc.info?l=oss-security&m=127909326909362&w=2Mailing ListX Refsource MLISTThird Party Advisory
www.debian.org/security/2010/dsa-2070Vendor AdvisoryX Refsource DEBIANThird Party Advisory
marc.info?l=oss-security&m=127905701201340&w=2Mailing ListX Refsource MLISTThird Party Advisory

Show all 17 references

securitytracker.com/id?1024266VDB EntryX Refsource SECTRACKThird Party Advisory
savannah.nongnu.org/bugs/?30249X Refsource CONFIRMIssue TrackingThird Party Advisory
www.redhat.com/support/errata/RHSA-2010-0578.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2010:137Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=613162X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
secunia.com/advisories/48951Third Party AdvisoryX Refsource SECUNIA
security-tracker.debian.org/tracker/CVE-2010-2499Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities