| Vulnerability Name: | CVE-2006-3467 (CCN-28098) | ||||||||||||||||||||||||||||||||
| Assigned: | 2006-07-18 | ||||||||||||||||||||||||||||||||
| Published: | 2006-07-18 | ||||||||||||||||||||||||||||||||
| Updated: | 2023-02-13 | ||||||||||||||||||||||||||||||||
| Summary: | Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861. | ||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 5.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
3.8 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-190 | ||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||||||||||||||
| References: | Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: Full-Disclosure Mailing List, Mon Nov 13 2006 - 17:22:20 CST VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1 Source: CCN Type: Full-Disclosure Mailing List, Mon Nov 13 2006 - 17:22:54 CST VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2 Source: CCN Type: Full-Disclosure Mailing List, Mon Nov 13 2006 - 17:23:03 CST VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2 Source: CCN Type: Full-Disclosure Mailing List, Mon Nov 13 2006 - 17:22:38 CST VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4 Source: CCN Type: Red Hat Bugzilla Bug 190593 CVE-2006-1861 freetype multiple integer overflows (CVE-2006-3467) Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: MITRE Type: CNA CVE-2006-3467 Source: CCN Type: NetBSD-SA2006-020 Integer overflows in PCF font parsers Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: RHSA-2006-0500 freetype security update Source: CCN Type: RHSA-2006-0634 xorg-x11 security update Source: CCN Type: RHSA-2006-0635 XFree86 security update Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: SA21701 Avaya Products FreeType Vulnerabilities Source: CCN Type: SA21836 Avaya Products XFree86 Vulnerability Source: CCN Type: SA22875 VMware ESX Server Multiple Vulnerabilities Source: CCN Type: SA22907 Sun Solaris libXfont Integer Overflow Vulnerability Source: CCN Type: SA23400 Avaya CMS / IR Sun Solaris libXfont Integer Overflow Vulnerability Source: CCN Type: SA23939 Sun Solaris FreeType Integer Overflow and Underflow Vulnerabilities Source: CCN Type: SA33937 Apple Mac OS X Security Update Fixes Multiple Vulnerabilities Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: SECTRACK ID: 1016522 FreeType Integer Overflows Let Remote Users Execute Arbitrary Code Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: Sun Alert ID: 102705 Security Vulnerabilities (Integer Overflows and a Denial of Service) in the FreeType 2 Font Engine Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: Sun Alert ID: 102714 Security Vulnerability With Integer Multiplication Within libXfont Affects Solaris X11 Servers Source: CCN Type: Apple Web site About the security content of Security Update 2009-001 Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: ASA-2006-173 xorg-x11 security update (RHSA-2006-0634) Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: ASA-2006-176 freetype security update (RHSA-2006-0500) Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: ASA-2006-186 XFree86 security update (RHSA-2006-0635) Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: ASA-2006-284 Sun Alert Notifications from Sun Weekly Report Dated November 18 2006 Source: CCN Type: ASA-2007-039 Security Vulnerabilities (Integer Overflows and a Denial of Service) in the FreeType 2 Font Engine (Sun 102705) Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: DEBIAN Type: DSA-1178 freetype -- integer overflow Source: DEBIAN Type: DSA-1193 xfree86 -- several vulnerabilities Source: CCN Type: GLSA-200607-02 FreeType: Multiple integer overflows Source: CCN Type: GLSA-200609-04 LibXfont: Multiple integer overflows Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: OpenPKG-SA-2006.017 Freetype Source: secalert@redhat.com Type: Patch, Vendor Advisory secalert@redhat.com Source: secalert@redhat.com Type: Vendor Advisory secalert@redhat.com Source: secalert@redhat.com Type: Vendor Advisory secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: USN-324-1 freetype vulnerability Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: USN-341-1 X.org vulnerability Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: VMware Web site VMware ESX Server 2.1.3 Upgrade Patch 2 (for 2.1.3 Systems Only) Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: VMware Advisory esx-253-200610-patch VMware ESX Server 2.5.3 Upgrade Patch 4 (for 2.5.3 Systems Only) Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: XF Type: UNKNOWN freetype2-font-file-bo(28098) Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: SUSE Type: SUSE-SA:2006:045 Freetype2 various security problems Source: SUSE Type: SUSE-SR:2007:021 SUSE Security Summary Report | ||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration RedHat 1: Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||