CVE-2008-1808
EPSS 2.6%Published: 6/16/2008Modified: 4/28/2026
Also known as:DEBIAN-CVE-2008-1808
Description
Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.
Affected packages (1)
- Debian/freetypefrom 0, < 2.3.6-1