CVE-2006-2661

MEDIUM 5.0CVE-2006-2661 · Published 30/05/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
freetype freetype	`< 2.2`	`2.2`

Description

ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference.

References

patches.sgi.com/support/free/security/advisories/20060701-01-U · Broken Link
lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html · Broken Link
secunia.com/advisories/20525 · Third Party Advisory
secunia.com/advisories/20591 · Third Party Advisory
secunia.com/advisories/20638 · Third Party Advisory
secunia.com/advisories/20791 · Third Party Advisory
secunia.com/advisories/21062 · Third Party Advisory
secunia.com/advisories/21135 · Third Party Advisory
secunia.com/advisories/21385 · Third Party Advisory
secunia.com/advisories/21701 · Third Party Advisory
secunia.com/advisories/23939 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
sunsolve.sun.com/search/document.do · Broken Link
support.avaya.com/elmodocs2/security/ASA-2006-176.htm · Third Party Advisory
debian.org/security/2006/dsa-1095 · Third Party Advisory
mandriva.com/security/advisories · Third Party Advisory
redhat.com/support/errata/RHSA-2006-0500.html · Third Party Advisory
securityfocus.com/archive/1/436836/100/0/threaded · Third Party Advisory
securityfocus.com/bid/18329 · Third Party Advisory
vupen.com/english/advisories/2007/0381 · Third Party Advisory
bugzilla.redhat.com/bugzilla/show_bug.cgi · Issue Tracking
issues.rpath.com/browse/RPL-429 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11692 · Third Party Advisory
usn.ubuntu.com/291-1 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free