CVE-2006-1861

Severity

75%

Complexity

99%

Confidentiality

106%

Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c. NOTE: item 4 was originally identified by CVE-2006-2493.

Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c. NOTE: item 4 was originally identified by CVE-2006-2493.

CVSS 2.0 Base Score 7.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P).

Overview

Type

FreeType

First reported 18 years ago

2006-05-23 10:06:00

Last updated 6 years ago

2018-10-18 16:36:00

Affected Software

FreeType 2.0.9

2.0.9

FreeType 2.1.3

2.1.3

FreeType 2.1.4

2.1.4

FreeType 2.1.5

2.1.5

FreeType 2.1.6

2.1.6

FreeType 2.1.7

2.1.7

FreeType 2.1.8

2.1.8

FreeType 2.1.8 rc1

2.1.8_rc1

FreeType 2.1.9

2.1.9

FreeType 2.1.10

2.1.10

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.