Published: 06/04/2007 Updated: 16/10/2018

CVSS v2 Base Score: 8.5 | Impact Score: 10 | Exploitability Score: 6.8

VMScore: 756

Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C

Subscribe to Ubuntu

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont prior to 20070403 and (2) freetype 2.3.2 and previous versions allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ubuntu ubuntu linux 6.06_lts
ubuntu ubuntu linux 5.10
ubuntu ubuntu linux 6.10
x.org libxfont 1.2.2
xfree86 project x11r6 4.3.0
xfree86 project x11r6 4.3.0.1
xfree86 project x11r6 4.3.0.2
rpath rpath linux 1
redhat enterprise linux 2.1
redhat enterprise linux 4.0
redhat linux advanced workstation 2.1
redhat enterprise linux 3.0
redhat enterprise linux desktop 3.0
redhat enterprise linux desktop 4.0
redhat enterprise linux 5.0
openbsd openbsd 3.9
openbsd openbsd 4.0
mandrakesoft mandrake_multi_network_firewall 2.0

Debian Bug report logs - #426771 CVE-2007-1351 bdf font overflows Package: freetype; Maintainer for freetype is Hugh McMaster <hughmcmaster@outlookcom>; Reported by: Kees Cook <kees@outfluxnet> Date: Wed, 30 May 2007 20:12:01 UTC Severity: important Tags: patch, security Found in versions 221-6, 221-5 Fixed i ...

Sean Larsson of iDefense Labs discovered that the MISC-XC extension of Xorg did not correctly verify the size of allocated memory An authenticated user could send a specially crafted X11 request and execute arbitrary code with root privileges (CVE-2007-1003) ...

Greg MacManus discovered an integer overflow in the font handling of libfreetype, a FreeType 2 font engine, which might lead to denial of service or possibly the execution of arbitrary code if a user is tricked into opening a malformed font For the old stable distribution (sarge) this problem will be fixed soon For the stable distribution (et ...

Several vulnerabilities have been discovered in the X Window System, which may lead to privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-1003 Sean Larsson discovered an integer overflow in the XC-MISC extension, which might lead to denial of service or local privilege escalat ...

CWE-189 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501 http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html http://www.redhat.com/support/errata/RHSA-2007-0126.html http://www.ubuntu.com/usn/usn-448-1 http://www.securityfocus.com/bid/23283 http://www.securitytracker.com/id?1017857 http://secunia.com/advisories/24741 http://secunia.com/advisories/24756 http://secunia.com/advisories/24770 http://issues.foresightlinux.org/browse/FL-223 http://sourceforge.net/project/shownotes.php?release_id=498954 https://issues.rpath.com/browse/RPL-1213 http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=498954 http://rhn.redhat.com/errata/RHSA-2007-0125.html http://www.redhat.com/support/errata/RHSA-2007-0132.html http://secunia.com/advisories/24745 http://secunia.com/advisories/24758 http://secunia.com/advisories/24765 http://secunia.com/advisories/24768 http://secunia.com/advisories/24771 http://secunia.com/advisories/24772 http://secunia.com/advisories/24776 http://secunia.com/advisories/24791 http://www.redhat.com/support/errata/RHSA-2007-0150.html http://www.securityfocus.com/bid/23402 http://secunia.com/advisories/24885 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733 http://www.novell.com/linux/security/advisories/2007_6_sr.html http://www.novell.com/linux/security/advisories/2007_27_x.html http://secunia.com/advisories/24889 http://secunia.com/advisories/25004 http://secunia.com/advisories/24921 http://secunia.com/advisories/24996 http://www.openbsd.org/errata39.html#021_xorg http://www.openbsd.org/errata40.html#011_xorg http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1 http://www.securityfocus.com/bid/23300 http://secunia.com/advisories/25006 http://security.gentoo.org/glsa/glsa-200705-02.xml http://security.gentoo.org/glsa/glsa-200705-10.xml http://secunia.com/advisories/25096 http://secunia.com/advisories/25195 http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm http://secunia.com/advisories/25216 http://support.avaya.com/elmodocs2/security/ASA-2007-193.htm http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html http://www.debian.org/security/2007/dsa-1294 http://www.mandriva.com/security/advisories?name=MDKSA-2007:079 http://www.mandriva.com/security/advisories?name=MDKSA-2007:080 http://www.mandriva.com/security/advisories?name=MDKSA-2007:081 http://secunia.com/advisories/25305 http://secunia.com/advisories/25495 http://www.debian.org/security/2008/dsa-1454 http://secunia.com/advisories/28333 http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml http://secunia.com/advisories/30161 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://www.vupen.com/english/advisories/2007/1548 http://www.vupen.com/english/advisories/2007/1217 http://www.vupen.com/english/advisories/2007/1264 http://www.trustix.org/errata/2007/0013/https://exchange.xforce.ibmcloud.com/vulnerabilities/33417 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266 http://www.securityfocus.com/archive/1/464816/100/0/threaded http://www.securityfocus.com/archive/1/464686/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=426771 https://usn.ubuntu.com/448-1/https://nvd.nist.gov

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook