CVE-2006-1861

Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack…

published May 23, 2006

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c. NOTE: item 4 was originally identified by CVE-2006-2493.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04814 · 91.9th percentile
Published
2006-05-23T10:00Z
EPSS history
Timeline
  • 23 MAY 10:00Z
    Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack…
    cvelistv5