CVE-2010-1797 details multiple stack-based buffer overflows within the FreeType library's CFF Type2 CharStrings interpreter, impacting Apple iOS versions before 4.0.2 on iPhone/iPod touch and 3.2.2 on iPad. This critical vulnerability (CVSS 9.3, FAUCET Risk 81.0) allows remote attackers to achieve arbitrary code execution or denial of service via crafted CFF opcodes embedded in PDF documents, with medium attack complexity. The flaw has been actively exploited in the wild, famously demonstrated by JailbreakMe, and public exploit code is available, indicating high attacker interest and community attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0.0CPE matchmatch criteria | cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:* | ||
1.0.1CPE matchmatch criteria | cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:* | ||
1.0.1CPE matchmatch criteria | cpe:2.3:o:apple:iphone_os:1.0.1:-:iphone:*:*:*:*:* | ||
1.0.2CPE matchmatch criteria | cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:* | ||
1.0.2CPE matchmatch criteria | cpe:2.3:o:apple:iphone_os:1.0.2:-:iphone:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.