CVE-2006-0747

Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values.

🔗 References (58)

• secalert@redhatftp://patches.sgi.com/support/free/security/advisories/20060701-01-U
• secalert@redhathttp://lists.apple.com/archives/security-announce/2009/May/msg00002.html
• secalert@redhathttp://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html
• secalert@redhathttp://secunia.com/advisories/20525
• secalert@redhathttp://secunia.com/advisories/20591
• secalert@redhathttp://secunia.com/advisories/20638
• secalert@redhathttp://secunia.com/advisories/20791
• secalert@redhathttp://secunia.com/advisories/21062
• secalert@redhathttp://secunia.com/advisories/21135
• secalert@redhathttp://secunia.com/advisories/21385
• secalert@redhathttp://secunia.com/advisories/21701
• secalert@redhathttp://secunia.com/advisories/23939
• secalert@redhathttp://secunia.com/advisories/35074
• secalert@redhathttp://securitytracker.com/id?1016522
• secalert@redhathttp://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1