CVE-2008-1806: Buffer Overflow
Published Jun 16, 2008
·Updated
Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.
Affected Software
4 affected components
FreeType=2.3.4
FreeType=2.3.5
FreeType=1.3.1
FreeType=2.3.3
Remediation
Patch Available
Event History
Jun 16, 2008
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1806?
CVE-2008-1806 is rated as a high severity vulnerability due to the potential for arbitrary code execution.
2
How do I fix CVE-2008-1806?
To fix CVE-2008-1806, upgrade FreeType to version 2.3.6 or later.
3
What types of systems are affected by CVE-2008-1806?
CVE-2008-1806 affects FreeType versions 1.3.1 and 2.3.3 through 2.3.5.
4
What type of attack is possible with CVE-2008-1806?
CVE-2008-1806 allows context-dependent attackers to execute arbitrary code via specially crafted Printer Font Binary (PFB) files.
5
Is CVE-2008-1806 a buffer overflow vulnerability?
Yes, CVE-2008-1806 triggers a heap-based buffer overflow due to integer overflow.