2.1.1

DATE	CVE	VULNERABILITY TITLE	RISK
2009-04-17	CVE-2009-0946	Integer Overflow OR Wraparound vulnerability in multiple products Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c. network low complexity freetype debian canonical opensuse suse apple CWE-190	7.5
2008-08-27	CVE-2008-3281	XML Entity Expansion vulnerability in multiple products libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document. network low complexity xmlsoft apple fedoraproject canonical debian redhat vmware CWE-776	6.5