high7.5
CVE-2006-1861
Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack ve…
Impact
Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c. NOTE: item 4 was originally identified by CVE-2006-2493.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freetype | Freetype | Versions 2.0.9, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html
- http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html
- http://secunia.com/advisories/20100
- http://secunia.com/advisories/20525
- http://secunia.com/advisories/20591
- http://secunia.com/advisories/20638
- http://secunia.com/advisories/20791
- http://secunia.com/advisories/21000
- http://secunia.com/advisories/21062
- http://secunia.com/advisories/21135
- http://secunia.com/advisories/21385
- http://secunia.com/advisories/21701
- http://secunia.com/advisories/23939
- http://secunia.com/advisories/27162
- http://secunia.com/advisories/27167
- http://secunia.com/advisories/27271
- http://secunia.com/advisories/33937
- http://secunia.com/advisories/35200
- http://secunia.com/advisories/35204
- http://secunia.com/advisories/35233
- http://security.gentoo.org/glsa/glsa-200607-02.xml
- http://securitytracker.com/id?1016522
- http://sourceforge.net/project/shownotes.php?release_id=416463
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1