CVE-2006-3467: Integer Overflow
Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3467?
CVE-2006-3467 is considered to have a medium severity due to its potential to cause a denial of service and execute arbitrary code.
How do I fix CVE-2006-3467?
To fix CVE-2006-3467, upgrade FreeType to version 2.2 or later, which addresses this vulnerability.
What systems are affected by CVE-2006-3467?
CVE-2006-3467 affects FreeType versions prior to 2.2.
What types of attacks are possible with CVE-2006-3467?
CVE-2006-3467 can be exploited to cause a denial of service and potentially allow for remote code execution through specially crafted PCF files.
Is CVE-2006-3467 related to any other vulnerabilities?
Yes, CVE-2006-3467 is related to CVE-2006-1861, as it represents a partial fix of that earlier vulnerability.