CVE-2006-1861

Published: May 23, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c. NOTE: item 4 was originally identified by CVE-2006-2493.

Affected (9)

Products: Freetype: Freetype

Freetype

1 product

Freetype

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Freetype Freetype	Version 2.0.9
Freetype Freetype	Version 2.1.10
Freetype Freetype	Version 2.1.3
Freetype Freetype	Version 2.1.4
Freetype Freetype	Version 2.1.5
Freetype Freetype	Version 2.1.6
Freetype Freetype	Version 2.1.7
Freetype Freetype	Version 2.1.8
Freetype Freetype	Version 2.1.9

Related CWEs

CWE-189

References (96)

ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U (unsafe URL)

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html

Source: secalert@redhat.com

http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html

Source: secalert@redhat.com

http://secunia.com/advisories/20100

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/20525

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20591

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20638

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/20791

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21000

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21062

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21135

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21385

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/21701

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/23939

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27162

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27167

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27271

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/33937

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/35200

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/35204

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/35233

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200607-02.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1016522

Source: secalert@redhat.com

http://sourceforge.net/project/shownotes.php?release_id=416463

Source: secalert@redhat.com

Patch

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1

Source: secalert@redhat.com

http://support.apple.com/kb/HT3438

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1095

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200710-09.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:099

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0500.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2009-0329.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2009-1062.html

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/archive/1/436836/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/18034

Source: secalert@redhat.com

Patch

http://www.vupen.com/english/advisories/2006/1868

Source: secalert@redhat.com

Vendor Advisory

http://www.vupen.com/english/advisories/2007/0381

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=128606

Source: secalert@redhat.com

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593

Source: secalert@redhat.com

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593#c8

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=502565

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/26553

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-429

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9124

Source: secalert@redhat.com

https://usn.ubuntu.com/291-1/

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U (unsafe URL)