CVEs-PoC/2008/CVE-2008-1808.md

CVE-2008-1808

Description

Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.

POC

Reference

• http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=605780
• http://www.ubuntu.com/usn/usn-643-1
• http://www.vmware.com/security/advisories/VMSA-2008-0014.html
• http://www.vmware.com/support/player/doc/releasenotes_player.html
• http://www.vmware.com/support/player2/doc/releasenotes_player2.html
• http://www.vmware.com/support/server/doc/releasenotes_server.html
• http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html
• http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html

Github

No PoCs found on GitHub currently.