x.org libxfont vulnerabilities and exploits

(subscribe to this query)

3.6

CVSSv2

In the PatternMatch function in fontfile/fontdir.c in libXfont up to and including 1.5.2 and 2.x prior to 2.0.2, an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts, leading to information disclosure or a crash (denial of servi...

X.org Libxfont 2.0.0 X.org Libxfont 2.0.1 X.org Libxfont

3.6

CVSSv2

In the pcfGetProperties function in bitmap/pcfread.c in libXfont up to and including 1.5.2 and 2.x prior to 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash o...

X.org Libxfont 2.0.0 X.org Libxfont 2.0.1 X.org Libxfont

7.5

CVSSv2

Buffer overflow in (1) X.Org Xserver prior to 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent malicious users to execute arbitrary code via a PCF font with a large difference between the last col and first col va...

Sun Solaris Libfont Sun Solaris Libxfont X.org Xserver

5

CVSSv2

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver prior to 1.4.1 allows context-dependent malicious users to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index.

X.org Xserver X.org Tog-cup

9.3

CVSSv2

Multiple integer overflows in X.Org Xserver prior to 1.4.1 allow context-dependent malicious users to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or ...

X.org Xserver X.org Evi X.org Mit-shm

7.5

CVSSv2

A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote malicious users to have unspecified impact.

X Libxfont 1.3.1

7.2

CVSSv2

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics (AFM) files with a modified number of character metrics (StartCharMetrics), which leads to a heap-based buffer overflow.

X.org X.org 6.8.2 Xfree86 Project Xfree86 X

7.2

CVSSv2

Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.

X.org X.org 6.8.2 Xfree86 Project Xfree86 X

9.3

CVSSv2

Array index error in the XFree86-Misc extension in X.Org Xserver prior to 1.4.1 allows context-dependent malicious users to execute arbitrary code via a PassMessage request containing a large array index.

Xfree86 Project Xfree86-misc X.org Xserver

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook