Summary
The remote host is missing an update to freetype
announced via advisory DSA 1334-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201334-1
Insight
A problem was discovered with freetype, a FreeType2 font engine, which could allow the execution of arbitary code via an integer overflow in specially crafted TTF files.
For the old stable distribution (sarge), this problem has been fixed in version 2.1.7-8.
We recommend that you upgrade your freetype package.
Severity
Classification
-
CVE CVE-2007-2754 -
CVSS Base Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities