U radu programskog paketa FreeType otkrivena je sigurnosna ranjivost. Riječ je o biblioteci programskih funkcija za prikaz fontova. Ranjivost se očituje u prepisivanju spremnika na gomili u funkciji "Ins_SHZ()" u datoteci "ttinterp.c". Udaljeni, zlonamjerni korisnik ju može iskoristiti za pokretanje proizvoljnog programskog koda ili izvođenje napada uskraćivanjem usluge (rušenje aplikacije). Budući da je proizvođač izdao odgovarajuće sigurnosne ispravke za otklanjanje spomenute ranjivosti, korisnicima se savjetuje njihova instalacija.

Oracle Solaris Freetype "Ins_SHZ()" Vulnerability
Secunia Advisory 	SA43833 	
Release Date 	2011-03-21
Criticality level 	Moderately criticalModerately critical
Impact 	System access
Where 	From remote
Authentication level 	Available in Customer Area
  	 
Report reliability 	Available in Customer Area
Solution Status 	Vendor Patch
  	 
Systems affected 	Available in Customer Area
Approve distribution 	Available in Customer Area
  	 
Operating System	
	Sun Solaris 10
	Sun Solaris 8
	Sun Solaris 9

Secunia CVSS Score 	Available in Customer Area
CVE Reference(s) 	CVE-2010-3814 CVSS available in Customer Area
	   	

Description

Oracle has acknowledged a vulnerability in Solaris, which can be exploited to cause a DoS (Denial of Service) or potentially compromise an application using the library.

For more information see vulnerability #2 in:
SA41738

Solution
Apply patches.
Further details available in Customer Area
Original Advisory
http://blogs.sun.com/security/entry/cve_2010_3814_buffer_overflow

Other references
Further details available in Customer Area