Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2006-1861 Details

Description

Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c. NOTE: item 4 was originally identified by CVE-2006-2493.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U	CVE
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html	CVE
http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html	CVE
http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html	CVE
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=128606	CVE
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593	CVE
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593#c8	CVE
https://bugzilla.redhat.com/show_bug.cgi?id=502565	CVE
http://secunia.com/advisories/20100	CVE	PatchVendor Advisory
http://secunia.com/advisories/20525	CVE	Vendor Advisory
http://secunia.com/advisories/20591	CVE	Vendor Advisory
http://secunia.com/advisories/20638	CVE	Vendor Advisory
http://secunia.com/advisories/20791	CVE	Vendor Advisory
http://secunia.com/advisories/21000	CVE	Vendor Advisory
http://secunia.com/advisories/21062	CVE	Vendor Advisory
http://secunia.com/advisories/21135	CVE	Vendor Advisory
http://secunia.com/advisories/21385	CVE	Vendor Advisory
http://secunia.com/advisories/21701	CVE	Vendor Advisory
http://secunia.com/advisories/23939	CVE	Vendor Advisory
http://secunia.com/advisories/27162	CVE	Vendor Advisory
http://secunia.com/advisories/27167	CVE	Vendor Advisory
http://secunia.com/advisories/27271	CVE	Vendor Advisory
http://secunia.com/advisories/33937	CVE	Vendor Advisory
http://secunia.com/advisories/35200	CVE	Vendor Advisory
http://secunia.com/advisories/35204	CVE	Vendor Advisory
http://secunia.com/advisories/35233	CVE	Vendor Advisory
http://security.gentoo.org/glsa/glsa-200607-02.xml	CVE
http://securitytracker.com/id?1016522	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/26553	CVE
https://issues.rpath.com/browse/RPL-429	CVE
http://sourceforge.net/project/shownotes.php?release_id=416463	CVE	Patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9124	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1	CVE
http://support.apple.com/kb/HT3438	CVE
http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm	CVE
https://usn.ubuntu.com/291-1/	CVE
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html	CVE
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html	CVE
http://www.debian.org/security/2006/dsa-1095	CVE
http://www.gentoo.org/security/en/glsa/glsa-200710-09.xml	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2006:099	CVE
http://www.redhat.com/support/errata/RHSA-2006-0500.html	CVE
http://www.redhat.com/support/errata/RHSA-2009-0329.html	CVE	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2009-1062.html	CVE	Vendor Advisory
http://www.securityfocus.com/archive/1/436836/100/0/threaded	CVE
http://www.securityfocus.com/bid/18034	CVE	Patch
http://www.vupen.com/english/advisories/2006/1868	CVE	Vendor Advisory
http://www.vupen.com/english/advisories/2007/0381	CVE	Vendor Advisory
ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U	[email protected]
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html	[email protected]
http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html	[email protected]
http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html	[email protected]
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=128606	[email protected]
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593	[email protected]
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=190593#c8	[email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=502565	[email protected]
http://secunia.com/advisories/20100	[email protected]	PatchVendor Advisory
http://secunia.com/advisories/20525	[email protected]	Vendor Advisory
http://secunia.com/advisories/20591	[email protected]	Vendor Advisory
http://secunia.com/advisories/20638	[email protected]	Vendor Advisory
http://secunia.com/advisories/20791	[email protected]	Vendor Advisory
http://secunia.com/advisories/21000	[email protected]	Vendor Advisory
http://secunia.com/advisories/21062	[email protected]	Vendor Advisory
http://secunia.com/advisories/21135	[email protected]	Vendor Advisory
http://secunia.com/advisories/21385	[email protected]	Vendor Advisory
http://secunia.com/advisories/21701	[email protected]	Vendor Advisory
http://secunia.com/advisories/23939	[email protected]	Vendor Advisory
http://secunia.com/advisories/27162	[email protected]	Vendor Advisory
http://secunia.com/advisories/27167	[email protected]	Vendor Advisory
http://secunia.com/advisories/27271	[email protected]	Vendor Advisory
http://secunia.com/advisories/33937	[email protected]	Vendor Advisory
http://secunia.com/advisories/35200	[email protected]	Vendor Advisory
http://secunia.com/advisories/35204	[email protected]	Vendor Advisory
http://secunia.com/advisories/35233	[email protected]	Vendor Advisory
http://security.gentoo.org/glsa/glsa-200607-02.xml	[email protected]
http://securitytracker.com/id?1016522	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/26553	[email protected]
https://issues.rpath.com/browse/RPL-429	[email protected]
http://sourceforge.net/project/shownotes.php?release_id=416463	[email protected]	Patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9124	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1	[email protected]
http://support.apple.com/kb/HT3438	[email protected]
http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm	[email protected]
https://usn.ubuntu.com/291-1/	[email protected]
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01316.html	[email protected]
https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01401.html	[email protected]
http://www.debian.org/security/2006/dsa-1095	[email protected]
http://www.gentoo.org/security/en/glsa/glsa-200710-09.xml	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2006:099	[email protected]
http://www.redhat.com/support/errata/RHSA-2006-0500.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2009-0329.html	[email protected]	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2009-1062.html	[email protected]	Vendor Advisory
http://www.securityfocus.com/archive/1/436836/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/18034	[email protected]	Patch
http://www.vupen.com/english/advisories/2006/1868	[email protected]	Vendor Advisory
http://www.vupen.com/english/advisories/2007/0381	[email protected]	Vendor Advisory

see all 96 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-189	Numeric Errors	[email protected]

Affected Products

Product	Versions
freetype freetype	2.0.9 2.1.3 2.1.4 2.1.5 2.1.6
CPE cpe:2.3:a:freetype:freetype:2.0.9:::::::* cpe:2.3:a:freetype:freetype:2.1.3:::::::* cpe:2.3:a:freetype:freetype:2.1.4:::::::* cpe:2.3:a:freetype:freetype:2.1.5:::::::* cpe:2.3:a:freetype:freetype:2.1.6:::::::* cpe:2.3:a:freetype:freetype:2.1.7:::::::* cpe:2.3:a:freetype:freetype:2.1.8:::::::* cpe:2.3:a:freetype:freetype:2.1.9:::::::* cpe:2.3:a:freetype:freetype:2.1.10:::::::* Remediation No remediation found in references.

Product

Versions

freetype freetype

2.0.9

2.1.3

2.1.4

2.1.5

2.1.6

CPE

cpe:2.3:a:freetype:freetype:2.0.9:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.5:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.6:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.7:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.8:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.9:*:*:*:*:*:*:*
cpe:2.3:a:freetype:freetype:2.1.10:*:*:*:*:*:*:*

Remediation

No remediation found in references.

Change History

13 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 16, 2026		[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 7, 2023	CVE Modified	[email protected]
Feb 13, 2023	CVE Modified	[email protected]
Feb 2, 2023	CVE Modified	[email protected]
Jan 26, 2021	CPE Deprecation Remap	[email protected]
Oct 18, 2018	CVE Modified	[email protected]
Oct 3, 2018	CVE Modified	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 20, 2017	CVE Modified	[email protected]
May 24, 2006	Initial Analysis	[email protected]