FreeType before 2.4.2 uses incorrect integer data types during bounds checking, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.
When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freetype | Freetype | * | 2.4.2 (excluding) |
| Freetype | Ubuntu | dapper | * |
| Freetype | Ubuntu | hardy | * |
| Freetype | Ubuntu | jaunty | * |
| Freetype | Ubuntu | karmic | * |
| Freetype | Ubuntu | lucid | * |
| Freetype | Ubuntu | upstream | * |