PT-2006-1035 · Freetype+1 · Freetype+1
Josh Bressers
·
Published
2006-05-23
·
Updated
2023-02-13
·
CVE-2006-1861
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
freetype versions prior to 2.2
freetype versions prior to 2.1.10-r2
freetype version 2.0.3
freetype versions prior to 1.4 pre20080316-r2
Description:
The issue concerns multiple vulnerabilities in the freetype package, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. The vulnerabilities are related to integer overflows in various files, including bdf/bdflib.c, sfnt/ttcmap.c, cff/cffgload.c, and base/ftmac.c, and can potentially allow attackers to execute arbitrary code or cause a denial of service.
Recommendations:
For freetype versions prior to 2.2, update to version 2.2 or later.
For freetype versions prior to 2.1.10-r2, update to version 2.1.10-r2 or later.
For freetype version 2.0.3, update to a version later than 2.0.3.
For freetype versions prior to 1.4 pre20080316-r2, update to version 1.4 pre20080316-r2 or later.
As a temporary workaround, consider restricting access to the vulnerable functions and files until a patch is available.
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Red Hat
Freetype