Multiple remotely exploitable buffer overflows have been discovered in FreeType, resulting in the execution of arbitrary code.
|Package||media-libs/freetype on all architectures|
|Affected versions||< 2.1.10-r2|
|Unaffected versions||>= 2.1.10-r2, < 2.0|
FreeType is a portable font engine.
Multiple integer overflows exist in a variety of files (bdf/bdflib.c, sfnt/ttcmap.c, cff/cffgload.c, base/ftmac.c).
A remote attacker could exploit these buffer overflows by enticing a user to load a specially crafted font, which could result in the execution of arbitrary code.
There is no known workaround at this time.
All FreeType users should upgrade to the latest stable version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/freetype-2.1.10-r2"
July 09, 2006
September 03, 2006: 02