{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[],"affected_systems_content":"<P><SPAN class=\"textit\">FreeType</SPAN> versions 2.3.12 et  ant\u00e9rieures.</P>","content":"## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s dans la gestion des polices de FreeType ont \u00e9t\u00e9\nd\u00e9couvertes. Un attaquant peut, par le biais d'un fichier de police de\ncaract\u00e8res, provoquer l'ex\u00e9cution de code arbitraire \u00e0 distance.\n\n## Solution\n\nMettre FreeType \u00e0 jour en version 2.4.0.\n","cves":[{"name":"CVE-2010-2499","url":"https://www.cve.org/CVERecord?id=CVE-2010-2499"},{"name":"CVE-2010-2519","url":"https://www.cve.org/CVERecord?id=CVE-2010-2519"},{"name":"CVE-2010-2497","url":"https://www.cve.org/CVERecord?id=CVE-2010-2497"},{"name":"CVE-2010-2498","url":"https://www.cve.org/CVERecord?id=CVE-2010-2498"},{"name":"CVE-2010-2520","url":"https://www.cve.org/CVERecord?id=CVE-2010-2520"},{"name":"CVE-2010-2500","url":"https://www.cve.org/CVERecord?id=CVE-2010-2500"}],"links":[],"reference":"CERTA-2010-AVI-315","revisions":[{"description":"version initiale.","revision_date":"2010-07-16T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"}],"summary":"Plusieurs vuln\u00e9rabilit\u00e9s dans <span class=\"textit\">FreeType</span>\npermettent l'ex\u00e9cution de code arbitraire \u00e0 distance.\n","title":"Vuln\u00e9rabilit\u00e9s dans FreeType","vendor_advisories":[{"published_at":null,"title":"Notes de la version 2.4.0 de FreeType","url":"http://sourceforge.net/projects/freetype/files/freetype2/2.4.0/NEWS/view"}]}