Security
Security
Multiple remotely exploitable buffer overflows have been discovered in FreeType, resulting in the execution of arbitrary code.
| Package | media-libs/freetype on all architectures |
|---|---|
| Affected versions | < 2.1.10-r2 |
| Unaffected versions | >= 2.1.10-r2 < 2.0 |
FreeType is a portable font engine.
Multiple integer overflows exist in a variety of files (bdf/bdflib.c, sfnt/ttcmap.c, cff/cffgload.c, base/ftmac.c).
A remote attacker could exploit these buffer overflows by enticing a user to load a specially crafted font, which could result in the execution of arbitrary code.
There is no known workaround at this time.
All FreeType users should upgrade to the latest stable version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/freetype-2.1.10-r2"
Release date
July 09, 2006
Latest revision
September 03, 2006: 02
Severity
normal
Exploitable
remote
Bugzilla entries