CVE-2010-2807: apple iphone_os

Modified

AliasesDEBIAN-CVE-2010-2807

Published 19-08-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-2807 is a medium (CVSS 6.8) vulnerability in apple iphone_os. EPSS estimates a 4.20% chance of exploitation in the next 30 days, higher than 90.9% of scored vulnerabilities.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

4.20%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1

DSA-2105-1

Timeline

19-08-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

4.20%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

No change 0.00 pp

From 4.20% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-681Incorrect Conversion between Numeric TypesWhen converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

Affected systems

Apple3 products

iphone_os< 4.2
mac_os_x< 10.6.5
tvos< 4.1.0

Canonical1 product

ubuntu_linuxEOL6.06 | 8.04 | 9.04 | 9.10 | 10.04

Debian1 product

freetype< 2.4.2-1

Freetype1 product

freetype< 2.4.2

4 vendors · 6 products

References

22 links

www.vupen.com/english/advisories/2010/3045VDB EntryX Refsource VUPENThird Party Advisory
support.apple.com/kb/HT4435X Refsource CONFIRMBroken Link
bugs.launchpad.net/ubuntu/maverick/+source/freetype/+bug/617019X Refsource CONFIRMIssue TrackingRelease NotesThird Party Advisory
support.apple.com/kb/HT4457X Refsource CONFIRMThird Party Advisory
www.vupen.com/english/advisories/2010/2018VDB EntryX Refsource VUPENThird Party Advisory
www.vupen.com/english/advisories/2010/3046VDB EntryX Refsource VUPENThird Party Advisory
www.ubuntu.com/usn/USN-972-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
marc.info?l=oss-security&m=128111955616772&w=2Mailing ListX Refsource MLISTPatchThird Party Advisory
secunia.com/advisories/42317Third Party AdvisoryX Refsource SECUNIA

Show all 22 references

secunia.com/advisories/40816Third Party AdvisoryX Refsource SECUNIA
freetype.sourceforge.net/index2.htmlX Refsource CONFIRMRelease NotesThird Party Advisory
secunia.com/advisories/42314Third Party AdvisoryX Refsource SECUNIA
git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=346f1867fd32dae8f56e5b482d1af98f626804acX Refsource CONFIRMPatchThird Party Advisory
sourceforge.net/projects/freetype/files/freetype2/2.4.2/NEWS/viewX Refsource CONFIRMProductThird Party Advisory
secunia.com/advisories/40982Third Party AdvisoryX Refsource SECUNIA
savannah.nongnu.org/bugs/?30657X Refsource CONFIRMIssue TrackingThird Party Advisory
www.vupen.com/english/advisories/2010/2106VDB EntryX Refsource VUPENThird Party Advisory
support.apple.com/kb/HT4456X Refsource CONFIRMThird Party Advisory
www.securityfocus.com/bid/42285VDB EntryX Refsource BIDThird Party Advisory
lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
security-tracker.debian.org/tracker/CVE-2010-2807Advisory