Description: A vulnerability was reported in FreeType. A remote user can cause arbitrary code to be executed on the target user's system.
A remote user can create a PDF file with specially crafted embedded fonts that, when loaded by the target user, will trigger a heap overflow and execute arbitrary code on the target system. The code will run with the privileges of the target user.
The vulnerability resides in 'src/truetype/ttinterp.c'.
Apple has issued a fix for iOS.
Oracle has issued a fix for Solaris 8, 9, 10, and 11.