CVE-2010-3311
Status: ModifiedHigh (9.3)—
Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an "input stream position error" issue, a different vulnerability than CVE-2010-1797.
CVSS
- Version: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Base score: 9.3
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 6.73%
- Percentile among all scored CVEs: 94
- Score date: 10/12/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-189
References
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
- http://secunia.com/advisories/48951
- http://www.debian.org/security/2010/dsa-2116
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:201
- http://www.redhat.com/support/errata/RHSA-2010-0864.html
- http://www.securityfocus.com/bid/43700
- http://www.ubuntu.com/usn/USN-1013-1
- https://bugzilla.redhat.com/show_bug.cgi?id=623625
- https://rhn.redhat.com/errata/RHSA-2010-0736.html
- https://rhn.redhat.com/errata/RHSA-2010-0737.html
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
- http://secunia.com/advisories/48951
- http://www.debian.org/security/2010/dsa-2116
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:201
- http://www.redhat.com/support/errata/RHSA-2010-0864.html
- http://www.securityfocus.com/bid/43700
- http://www.ubuntu.com/usn/USN-1013-1
- https://bugzilla.redhat.com/show_bug.cgi?id=623625
- https://rhn.redhat.com/errata/RHSA-2010-0736.html
- https://rhn.redhat.com/errata/RHSA-2010-0737.html
Raw JSON (NVD)
Show
{
"id": "CVE-2010-3311",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-01-07T23:00:18.827",
"references": [
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html",
"source": "secalert@redhat.com"
},
{
"url": "http://secunia.com/advisories/48951",
"source": "secalert@redhat.com"
},
{
"url": "http://www.debian.org/security/2010/dsa-2116",
"source": "secalert@redhat.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:201",
"source": "secalert@redhat.com"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2010-0864.html",
"source": "secalert@redhat.com"
},
{
"url": "http://www.securityfocus.com/bid/43700",
"source": "secalert@redhat.com"
},
{
"url": "http://www.ubuntu.com/usn/USN-1013-1",
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=623625",
"source": "secalert@redhat.com"
},
{
"url": "https://rhn.redhat.com/errata/RHSA-2010-0736.html",
"source": "secalert@redhat.com"
},
{
"url": "https://rhn.redhat.com/errata/RHSA-2010-0737.html",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/48951",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2010/dsa-2116",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:201",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.redhat.com/support/errata/RHSA-2010-0864.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/43700",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ubuntu.com/usn/USN-1013-1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=623625",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://rhn.redhat.com/errata/RHSA-2010-0736.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://rhn.redhat.com/errata/RHSA-2010-0737.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-189"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Compact Font Format (CFF) font file that triggers a heap-based buffer overflow, related to an \"input stream position error\" issue, a different vulnerability than CVE-2010-1797."
},
{
"lang": "es",
"value": "Desbordamiento de enteros en base/ftstream.c en libXft (también conocida como la librería FreeType X) en FreeType anterior a v2.4 permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) o posiblemente ejecutar código arbitrario mediante un archivo de Formato de Fuente Compacto (CFF) manipulado que provoca un desbordamiento de búfer basado en memoria dinámica, relacionado con un \"error de posición en el flujo de entrada\", una vulnerabilidad diferente de CVE-2010-1797."
}
],
"lastModified": "2026-06-16T23:22:33.727",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05932F1E-2960-4CEB-9DB6-A05977E11AAC",
"versionEndIncluding": "2.3.12"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:1.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "888C3BB8-510B-4FBE-BA5D-0D488583C7DD"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B126D1A0-6B54-4C56-8CEC-B395D54A5C3C"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28CA4C7D-D70A-44CF-8E3D-F2612CCA0799"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4E76672-7216-443E-BBD8-120DA96F7E4D"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "369D87D8-E4A7-4EC4-B508-2940EE174F95"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "288FDB59-7FE4-4351-8822-554ADF07C79A"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B681257A-F8D8-46D5-995D-BC44F54DD5C0"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56E0DEB6-4414-49AB-88E9-988CE5D8EF67"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56A90D08-2CAF-422F-8587-7D88EC7632A1"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B944FEB-F69D-4F6C-9485-26F95A5874B6"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.1.8:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9B9B1DE-89F6-463D-A3F4-6366D5D30077"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F73474B9-6853-4C5C-9CB9-5F4D3080D1C5"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5283E910-D512-481C-804E-8717A83B24CB"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A28C0F7A-F1F3-4F3B-81B9-228DA8FCCCD8"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F7252819-BA8A-4BD1-BAAA-179A8777C994"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.2.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B4450B4-B21F-4153-B9DD-C36A2381F00D"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11575E3C-2BEA-4264-AE41-4A962BD17035"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D333A965-EAD2-40DB-8FBE-C4C7DF44C35C"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CA37666-D2E6-47EF-BFFE-A9449D6A72CD"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2B49505-C973-4673-A9BC-34ACA25059D0"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8E8ECCA-58F2-4A05-8DF2-79C09A5FB275"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8697D11D-BBDF-4722-85F7-5144A5D26E37"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "50E3EDA8-04D1-4DF1-80BB-72C6003E8F53"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.3.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB06CA25-BB25-43B8-9FC2-62C399CC52EE"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.3.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AF7414E-33A7-40E2-AEF0-1AE9D7D1B077"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.3.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FC0BD12-E065-4CC9-8AEE-E4C34A58EC3C"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.3.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "214DC64B-BA35-486B-AE30-F2D9381E4D26"
},
{
"criteria": "cpe:2.3:a:freetype:freetype:2.3.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7CDE19A-473A-4BC5-AA7B-3D08FEEEE82C"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert@redhat.com"
}