CVE-2010-2805: apple iphone_os Improper Input Validation

CVSS: 6.8v2.0MediumModified

AliasesDEBIAN-CVE-2010-2805

Published 19-08-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-2805 is a medium (CVSS 6.8) Improper Input Validation vulnerability in apple iphone_os. EPSS estimates a 5.11% chance of exploitation in the next 30 days, higher than 92.3% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

38/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

5.11%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 4 · Related 2

DSA-2105-1 OPENSUSE-SU-2024:10172-1 OPENSUSE-SU-2024:10438-1 RHSA-2010:0864

Timeline

19-08-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The FT_Stream_EnterFrame function in base/ftstream.c in FreeType before 2.4.2 does not properly validate certain position values, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

5.11%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 5.11% on 21-09-2026

21-09-202621-10-2026

EPSS score

5.11%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (savannah.nongnu.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Apple3 products

iphone_os< 4.2
mac_os_x< 10.6.5
tvos< 4.1.0

Canonical1 product

ubuntu_linuxEOL6.06 | 8.04 | 9.04 | 9.10 | 10.04

Debian1 product

freetype< 2.4.2-1

Freetype1 product

freetype< 2.4.2

4 vendors · 6 products

References

24 links

www.vupen.com/english/advisories/2010/3045VDB EntryX Refsource VUPENThird Party Advisory
support.apple.com/kb/HT4435X Refsource CONFIRMBroken Link
bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019X Refsource CONFIRMIssue TrackingRelease NotesThird Party Advisory
support.apple.com/kb/HT4457X Refsource CONFIRMThird Party Advisory
www.vupen.com/english/advisories/2010/2018VDB EntryX Refsource VUPENThird Party Advisory
www.vupen.com/english/advisories/2010/3046VDB EntryX Refsource VUPENThird Party Advisory
git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=45a3c76b547511fa9d97aca34b150a0663257375X Refsource CONFIRMPatchThird Party Advisory
www.ubuntu.com/usn/USN-972-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
marc.info?l=oss-security&m=128111955616772&w=2Mailing ListX Refsource MLISTPatchThird Party Advisory

Show all 24 references

secunia.com/advisories/42317Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/40816Third Party AdvisoryX Refsource SECUNIA
freetype.sourceforge.net/index2.htmlX Refsource CONFIRMRelease NotesThird Party Advisory
secunia.com/advisories/42314Third Party AdvisoryX Refsource SECUNIA
sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/viewX Refsource CONFIRMThird Party Advisory
www.redhat.com/support/errata/RHSA-2010-0864.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/40982Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2010/2106VDB EntryX Refsource VUPENThird Party Advisory
support.apple.com/kb/HT4456X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/48951Third Party AdvisoryX Refsource SECUNIA
savannah.nongnu.org/bugs/?30644X Refsource CONFIRMExploitIssue TrackingThird Party Advisory
www.securityfocus.com/bid/42285VDB EntryX Refsource BIDThird Party Advisory
lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
security-tracker.debian.org/tracker/CVE-2010-2805Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities