CVE-2006-2661
NoneCVSS
—
EPSS
16.5%
Published
May 30, 2006
CISA due date
—
The record
ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | freetype | 0 | 2.2.1-1 |
| Debian:11 | freetype | 0 | 2.2.1-1 |
| Debian:12 | freetype | 0 | 2.2.1-1 |
| Debian:13 | freetype | 0 | 2.2.1-1 |
| Debian:3.0 | freetype | 0 | 2.0.9-1woody1 |
| Debian:3.1 | freetype | 0 | 2.1.7-2.5 |
| Red Hat:enterprise_linux:3::as | freetype | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::as | freetype-debuginfo | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::as | freetype-devel | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::desktop | freetype | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::desktop | freetype-debuginfo | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::desktop | freetype-devel | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::es | freetype | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::es | freetype-debuginfo | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::es | freetype-devel | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::ws | freetype | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::ws | freetype-debuginfo | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:3::ws | freetype-devel | 0 | 0:2.1.4-4.0.rhel3.2 |
| Red Hat:enterprise_linux:4::as | freetype | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::as | freetype-debuginfo | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::as | freetype-demos | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::as | freetype-devel | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::as | freetype-utils | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype-debuginfo | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype-demos | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype-devel | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::desktop | freetype-utils | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype-debuginfo | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype-demos | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype-devel | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::es | freetype-utils | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype-debuginfo | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype-demos | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype-devel | 0 | 0:2.1.9-1.rhel4.4 |
| Red Hat:enterprise_linux:4::ws | freetype-utils | 0 | 0:2.1.9-1.rhel4.4 |
Related vulnerabilities
- CVE-2020-15999 Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote… Also affects freetype
- CVE-2006-0747 Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of… Also affects freetype
- CVE-2025-27363 An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of… Also affects freetype
- CVE-2022-27406 FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a… Also affects freetype
- CVE-2022-27405 FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a… Also affects freetype
- CVE-2015-9381 FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in… Also affects freetype
- CVE-2015-9383 FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in… Also affects freetype
- CVE-2017-8105 FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer… Also affects freetype