HIGH
freetype: multiple integer overflow vulnerabilities
Published May 23, 2006
7.5
HIGHCVSS 2.0
EPSS 4.81%
Description
Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c. NOTE: item 4 was originally identified by CVE-2006-2493.
Affected products
No data.
OR
- 2.0.9
- 2.1.3
- 2.1.4
- 2.1.5
- 2.1.6
- 2.1.7
- 2.1.8
- 2.1.9
- 2.1.10
No data.
Red Hat Enterprise Linux 2.1
freetype-0:2.0.3-17.el21
Fixed · RHSA-2009:1062
Red Hat Enterprise Linux 3
freetype-0:2.1.4-12.el3
Fixed · RHSA-2009:0329
Red Hat Enterprise Linux 3
freetype-0:2.1.4-4.0.rhel3.2
Fixed · RHSA-2006:0500
Red Hat Enterprise Linux 4
freetype-0:2.1.9-1.rhel4.4
Fixed · RHSA-2006:0500
Red Hat Enterprise Linux 4
freetype-0:2.1.9-10.el4.7
Fixed · RHSA-2009:0329
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 2.1 | freetype-0:2.0.3-17.el21 | Fixed | RHSA-2009:1062 |
| Red Hat Enterprise Linux 3 | freetype-0:2.1.4-12.el3 | Fixed | RHSA-2009:0329 |
| Red Hat Enterprise Linux 3 | freetype-0:2.1.4-4.0.rhel3.2 | Fixed | RHSA-2006:0500 |
| Red Hat Enterprise Linux 4 | freetype-0:2.1.9-1.rhel4.4 | Fixed | RHSA-2006:0500 |
| Red Hat Enterprise Linux 4 | freetype-0:2.1.9-10.el4.7 | Fixed | RHSA-2009:0329 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (52)
- ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U vendor-advisoryx_refsource_SGI
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html vendor-advisoryx_refsource_APPLE
- http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html vendor-advisoryx_refsource_SUSE
- http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html vendor-advisoryx_refsource_SUSE
- http://secunia.com/advisories/20100 third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
- http://secunia.com/advisories/20525 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/20591 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/20638 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/20791 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/21000 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/21062 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/21135 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/21385 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/21701 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/23939 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/27162 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/27167 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/27271 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/33937 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/35200 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/35204 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/35233 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://security.gentoo.org/glsa/glsa-200607-02.xml vendor-advisoryx_refsource_GENTOO
- http://securitytracker.com/id?1016522 vdb-entryx_refsource_SECTRACK
- http://sourceforge.net/project/shownotes.php?release_id=416463 x_refsource_CONFIRMPatch
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1 vendor-advisoryx_refsource_SUNALERT
- http://support.apple.com/kb/HT3438 x_refsource_CONFIRM
- http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm x_refsource_CONFIRM
- http://www.debian.org/security/2006/dsa-1095 vendor-advisoryx_refsource_DEBIAN
- http://www.gentoo.org/security/en/glsa/glsa-200710-09.xml vendor-advisoryx_refsource_GENTOO
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:099 vendor-advisoryx_refsource_MANDRIVA
- http://www.redhat.com/support/errata/RHSA-2006-0500.html vendor-advisoryx_refsource_REDHAT
- http://www.redhat.com/support/errata/RHSA-2009-0329.html vendor-advisoryx_refsource_REDHATVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2009-1062.html vendor-advisoryx_refsource_REDHATVendor Advisory
- http://www.securityfocus.com/archive/1/436836/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/18034 vdb-entryx_refsource_BIDPatch
- http://www.vupen.com/english/advisories/2006/1868 vdb-entryx_refsource_VUPENVendor Advisory
- http://www.vupen.com/english/advisories/2007/0381 vdb-entryx_refsource_VUPENVendor Advisory
- https://access.redhat.com/security/cve/CVE-2006-1861 Vendor Advisory
- https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=128606 x_refsource_CONFIRM
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593 x_refsource_CONFIRM
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593#c8 x_refsource_CONFIRM
- https://bugzilla.redhat.com/show_bug.cgi?id=484437 Issue Tracking
- https://bugzilla.redhat.com/show_bug.cgi?id=502565 x_refsource_CONFIRM
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26553 vdb-entryx_refsource_XF
- https://issues.rpath.com/browse/RPL-429 x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2006-1861
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9124 vdb-entrysignaturex_refsource_OVAL
- https://usn.ubuntu.com/291-1/ vendor-advisoryx_refsource_UBUNTU
- https://www.cve.org/CVERecord?id=CVE-2006-1861
- https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html vendor-advisoryx_refsource_FEDORA
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published May 23, 2006
Updated Aug 7, 2024
Reserved Apr 19, 2006
Link CVE-2006-1861
CISA Vulnrichment
Updated n/a