CVE-2010-3311

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.4

Description The issue is related to an integer overflow in the base/ftstream.c file of the libXft library in FreeType, which can be triggered by a crafted Compact Font Format (CFF) font file. This can cause a denial of service (application crash) or possibly allow the execution of arbitrary code due to a heap-based buffer overflow. The vulnerability can be exploited remotely.

Recommendations For FreeType versions prior to 2.4, update to version 2.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted CFF font files to minimize the risk of exploitation.