p PatchFirst

CVE-2006-1861

CVE-2006-1861

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c. NOTE: item 4 was originally identified by CVE-2006-2493.

EPSS 4.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • freetype Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.2.1-1

    Update to 2.2.1-1

  • freetype Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.2.1-1

    Update to 2.2.1-1

  • freetype Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.2.1-1

    Update to 2.2.1-1

Original sources

Check your server →