Red Hat Security AdvisoryRHSA-2006:0500
freetype security update
Released 2006-07-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 freetype-2.1.4-4.0.rhel3.2, freetype-2.1.4-4.0.rhel3.2.i386, freetype-devel-2.1.4-4.0.rhel3.2 +1
- Red Hat Enterprise Linux AS version 3 freetype-2.1.4-4.0.rhel3.2, freetype-2.1.4-4.0.rhel3.2.i386, freetype-2.1.4-4.0.rhel3.2.ia64 +5
- Red Hat Enterprise Linux AS version 4 freetype-2.1.9-1.rhel4.4, freetype-2.1.9-1.rhel4.4.i386, freetype-2.1.9-1.rhel4.4.ia64 +13
- Red Hat Enterprise Linux Desktop version 4 freetype-2.1.9-1.rhel4.4, freetype-2.1.9-1.rhel4.4.i386, freetype-demos-2.1.9-1.rhel4.4 +5
- Red Hat Enterprise Linux ES version 3 freetype-2.1.4-4.0.rhel3.2, freetype-2.1.4-4.0.rhel3.2.i386, freetype-2.1.4-4.0.rhel3.2.ia64 +3
- Red Hat Enterprise Linux ES version 4 freetype-2.1.9-1.rhel4.4, freetype-2.1.9-1.rhel4.4.i386, freetype-2.1.9-1.rhel4.4.ia64 +9
- Red Hat Enterprise Linux WS version 3 freetype-2.1.4-4.0.rhel3.2, freetype-2.1.4-4.0.rhel3.2.i386, freetype-2.1.4-4.0.rhel3.2.ia64 +3
- Red Hat Enterprise Linux WS version 4 freetype-2.1.9-1.rhel4.4, freetype-2.1.9-1.rhel4.4.i386, freetype-2.1.9-1.rhel4.4.ia64 +9
Fixes 4 records
Priority MEDIUM 41
Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04814 · Published 2006-05-23 · Fixed CWE-189
Priority MEDIUM 40
Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04349 · Published 2006-07-18 · Fixed CWE-189
Priority LOW 39
ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.1647 · Published 2006-05-30 · Fixed CWE-476
Priority LOW 37
Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.12715 · Published 2006-05-23 · Fixed CWE-189
THREATIST.IORead the docs