CVE-2010-2497

Key facts

CVSS score

6.8 (v2.0)

Severity

MEDIUM

CVSS vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness (CWE)

CWE-191

EPSS score

5.6% (93th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2010-2501)

Published

August 19, 2010

NVD last modified

June 16, 2026

Status

Modified

Affected products

• apple / mac os x
• debian / debian linux
• freetype / freetype

Certified products that may be affected

2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Apple Mac OS X 10.6 - Apple Inc. - Common Criteria BSI-DSZ-CC-0536-2010 - archived
• Apple Mac OS X v10.3.6 and Apple Mac OS X Server V10.3.6 - Apple Inc. - Common Criteria CCEVS-VR-0086-2005 - archived

References

• http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=7d3d2cc4fef72c6be9c454b3809c387e12b44cfc(Patch, Third Party Advisory)
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html(Mailing List, Third Party Advisory)
• http://lists.nongnu.org/archive/html/freetype/2010-07/msg00001.html(Mailing List, Release Notes, Third Party Advisory)
• http://marc.info/?l=oss-security&m=127905701201340&w=2(Mailing List, Third Party Advisory)
• http://marc.info/?l=oss-security&m=127909326909362&w=2(Mailing List, Third Party Advisory)
• http://secunia.com/advisories/48951(Third Party Advisory)
• http://support.apple.com/kb/HT4435(Broken Link)
• http://www.debian.org/security/2010/dsa-2070(Third Party Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2010:137(Third Party Advisory)
• https://bugzilla.redhat.com/show_bug.cgi?id=613154(Issue Tracking, Patch, Third Party Advisory)
• https://savannah.nongnu.org/bugs/?30082(Exploit, Issue Tracking, Third Party Advisory)
• https://savannah.nongnu.org/bugs/?30083(Exploit, Issue Tracking, Third Party Advisory)