1. Gentoo Linux Security Advisory
| Advisory Reference | GLSA 200607-02 / FreeType |
| Release Date | July 09, 2006 |
| Latest Revision | September 03, 2006: 02 |
| Impact | normal |
| Exploitable | remote |
| Package | Vulnerable versions | Unaffected versions | Architecture(s) |
| media-libs/freetype | < 2.1.10-r2 | >= 2.1.10-r2, < 2.0 | All supported architectures |
Related bugreports: #124828
Multiple remotely exploitable buffer overflows have been discovered in FreeType, resulting in the execution of arbitrary code.
FreeType is a portable font engine.
Multiple integer overflows exist in a variety of files (bdf/bdflib.c, sfnt/ttcmap.c, cff/cffgload.c, base/ftmac.c).
A remote attacker could exploit these buffer overflows by enticing a user to load a specially crafted font, which could result in the execution of arbitrary code.
There is no known workaround at this time.
All FreeType users should upgrade to the latest stable version:
Code Listing 3.1: Resolution |
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/freetype-2.1.10-r2" |