freetype: integer overflows [LWN.net]

Package(s):

freetype

CVE #(s):

CVE-2006-0747 CVE-2006-1861 CVE-2006-2493 CVE-2006-2661 CVE-2006-3467

Created:

June 8, 2006

Updated:

October 10, 2007

Description:

The FreeType library has several integer overflow vulnerabilities. If a user can be tricked into installing a specially crafted font file, arbitrary code can be executed with the privilege of the user.

Alerts:

Gentoo	200710-09	2007-10-09
Debian	DSA-1178-1	2006-09-16
Ubuntu	USN-341-1	2006-09-06
Gentoo	200609-04	2006-09-06
rPath	rPSA-2006-0157-1	2006-08-25
Mandriva	MDKSA-2006:148	2006-08-24
Red Hat	RHSA-2006:0635-01	2006-08-21
Red Hat	RHSA-2006:0634-01	2006-08-21
Fedora	FEDORA-2006-912	2006-08-14
SuSE	SUSE-SA:2006:045	2006-08-01
OpenPKG	OpenPKG-SA-2006.017	2006-07-28
Ubuntu	USN-324-1	2006-07-27
Slackware	SSA:2006-207-02	2006-07-27
Mandriva	MDKSA-2006:129	2006-07-20
Gentoo	200607-02	2006-07-09
SuSE	SUSE-SA:2006:037	2006-06-27
Mandriva	MDKSA-2006:099-1	2006-06-13
Mandriva	MDKSA-2006:099	2006-06-12
rPath	rPSA-2006-0100-1	2006-06-12
Debian	DSA-1095-1	2006-06-10
Ubuntu	USN-291-1	2006-06-08

(Log in to post comments)