Submitted by KeesCook on Thu, 2006-07-27 12:06
Referenced CVEs:
CVE-2006-3467
Description:
===========================================================
Ubuntu Security Notice USN-324-1 July 27, 2006
freetype vulnerability
CVE-2006-3467
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 5.04
Ubuntu 5.10
Ubuntu 6.06 LTS
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 5.04:
libfreetype6 2.1.7-2.3ubuntu0.2
Ubuntu 5.10:
libfreetype6 2.1.7-2.4ubuntu1.2
Ubuntu 6.06 LTS:
libfreetype6 2.1.10-1ubuntu2.2
After a standard system upgrade you need to restart your session to
effect the necessary changes.
Details follow:
An integer overflow has been discovered in the FreeType library. By
tricking a user into installing and/or opening a specially crafted
font file, these could be exploited to execute arbitrary code with the
privileges of that user.


