PT-2006-1796 · Freetype+1 · Freetype+1

Josh Bressers · Published 2006-05-23 · Updated 2018-10-19 · CVE-2006-0747

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Freetype versions prior to 2.2

Description The issue is caused by an integer underflow in the handling of font files. Specifically, when a font file contains an odd number of blue values, it causes an underflow when the system attempts to decrement by 2, assuming an even number of values. This can lead to a denial of service, resulting in a crash.

Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue.

Exploit

Fix

DoS

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2006-0747

DSA-1095-1

RHSA-2006:0500

RHSA-2006_0500

Affected Products

Freetype

Red Hat

References · 48

• 🔥 https://exploit-db.com/exploits/27992 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2006-0747 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-0747 · Vendor Advisory
• http://vupen.com/english/advisories/2007/0381 · Vendor Advisory
• http://secunia.com/advisories/35074 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-0747 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06175 · Security Note
• http://redhat.com/support/errata/RHSA-2006-0500.html · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09504 · Security Note
• https://bdu.fstec.ru/vul/2015-06179 · Security Note
• http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html · Vendor Advisory
• http://secunia.com/advisories/20791 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1297 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04895 · Security Note