Published: 21/07/2006 Updated: 13/02/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Freetype

Integer overflow in FreeType prior to 2.2 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freetype freetype

Debian Bug report logs - #379920 freetype: buffer overflow [CVE-2006-3467] Package: freetype; Maintainer for freetype is Hugh McMaster <hughmcmaster@outlookcom>; Reported by: Martin Pitt <martinpitt@ubuntucom> Date: Wed, 26 Jul 2006 11:33:01 UTC Severity: grave Tags: patch, security Found in version 221-2 Fixe ...

An integer overflow has been discovered in the FreeType library By tricking a user into installing and/or opening a specially crafted font file, these could be exploited to execute arbitrary code with the privileges of that user ...

An integer overflow has been discovered in Xorg’s font handling library By using a specially crafted font file, this could be exploited to crash the X server or execute arbitrary code with root privileges ...

Several vulnerabilities have been discovered in the X Window System, which may lead to the execution of arbitrary code or denial of service The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-3467 Chris Evan discovered an integer overflow in the code to handle PCF fonts, which might lead to denial ...

It was discovered that an integer overflow in freetype's PCF font code may lead to denial of service and potential execution of arbitrary code For the stable distribution (sarge) this problem has been fixed in version 217-6 For the unstable distribution (sid) this problem has been fixed in version 221-5 We recommend that you upgrade your fre ...

CWE-189 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593 http://www.redhat.com/support/errata/RHSA-2006-0500.html http://secunia.com/advisories/21144 ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U http://www.ubuntu.com/usn/usn-324-1 http://securitytracker.com/id?1016522 http://secunia.com/advisories/21232 http://secunia.com/advisories/21135 http://lists.suse.com/archive/suse-security-announce/2006-Aug/0002.html http://secunia.com/advisories/21285 http://www.redhat.com/support/errata/RHSA-2006-0634.html http://www.redhat.com/support/errata/RHSA-2006-0635.html http://secunia.com/advisories/21566 http://secunia.com/advisories/21567 http://security.gentoo.org/glsa/glsa-200609-04.xml http://www.ubuntu.com/usn/usn-341-1 http://secunia.com/advisories/21793 http://secunia.com/advisories/21798 http://secunia.com/advisories/21606 http://secunia.com/advisories/21626 http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm http://support.avaya.com/elmodocs2/security/ASA-2006-186.htm http://secunia.com/advisories/21701 http://secunia.com/advisories/21836 http://www.debian.org/security/2006/dsa-1178 http://www.trustix.org/errata/2006/0052/http://secunia.com/advisories/22027 http://www.debian.org/security/2006/dsa-1193 http://secunia.com/advisories/22332 http://secunia.com/advisories/22907 http://www.vmware.com/download/esx/esx-202-200610-patch.html http://www.vmware.com/download/esx/esx-213-200610-patch.html http://www.vmware.com/download/esx/esx-254-200610-patch.html http://secunia.com/advisories/22875 http://support.avaya.com/elmodocs2/security/ASA-2006-284.htm http://secunia.com/advisories/23400 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1 http://secunia.com/advisories/23939 http://www.mandriva.com/security/advisories?name=MDKSA-2006:129 http://www.mandriva.com/security/advisories?name=MDKSA-2006:148 http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html http://secunia.com/advisories/27271 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://www.vupen.com/english/advisories/2006/4522 http://www.vupen.com/english/advisories/2006/4502 http://www.vupen.com/english/advisories/2007/0381 http://secunia.com/advisories/21062 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10673 http://www.securityfocus.com/archive/1/451426/100/200/threaded http://www.securityfocus.com/archive/1/451419/100/200/threaded http://www.securityfocus.com/archive/1/451417/100/200/threaded http://www.securityfocus.com/archive/1/451404/100/0/threaded http://www.securityfocus.com/archive/1/444318/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=379920 https://nvd.nist.gov https://usn.ubuntu.com/324-1/

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook