Published: 06/04/2007 Updated: 16/10/2018

CVSS v2 Base Score: 3.8 | Impact Score: 4.9 | Exploitability Score: 4.4

VMScore: 338

Vector: AV:A/AC:M/Au:S/C:N/I:P/A:P

Subscribe to Mandrake Linux

Integer overflow in the FontFileInitTable function in X.Org libXfont prior to 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mandrakesoft mandrake_multi_network_firewall 2.0
x.org libxfont 1.2.2
redhat enterprise linux 2.1
redhat enterprise linux 3.0
redhat enterprise linux 4.0
redhat fedora core core_1.0
redhat linux 9.0
redhat enterprise linux desktop 5.0
redhat linux advanced workstation 2.1
redhat enterprise linux desktop 3.0
redhat enterprise linux desktop 4.0
slackware slackware linux current
slackware slackware linux 9.0
slackware slackware linux 9.1
turbolinux turbolinux desktop 10.0
ubuntu ubuntu linux 5.10
ubuntu ubuntu linux 6.06_lts
ubuntu ubuntu linux 6.10
ubuntu ubuntu linux 4.1
rpath linux 1
openbsd openbsd 3.9
openbsd openbsd 4.0

Sean Larsson of iDefense Labs discovered that the MISC-XC extension of Xorg did not correctly verify the size of allocated memory An authenticated user could send a specially crafted X11 request and execute arbitrary code with root privileges (CVE-2007-1003) ...

Several vulnerabilities have been discovered in the X Window System, which may lead to privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-1003 Sean Larsson discovered an integer overflow in the XC-MISC extension, which might lead to denial of service or local privilege escalat ...

NVD-CWE-Other http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=502 http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html http://www.redhat.com/support/errata/RHSA-2007-0126.html http://www.ubuntu.com/usn/usn-448-1 http://www.securityfocus.com/bid/23283 http://www.securitytracker.com/id?1017857 http://secunia.com/advisories/24741 http://secunia.com/advisories/24756 http://secunia.com/advisories/24770 http://issues.foresightlinux.org/browse/FL-223 https://issues.rpath.com/browse/RPL-1213 http://rhn.redhat.com/errata/RHSA-2007-0125.html http://www.redhat.com/support/errata/RHSA-2007-0132.html http://secunia.com/advisories/24745 http://secunia.com/advisories/24758 http://secunia.com/advisories/24765 http://secunia.com/advisories/24771 http://secunia.com/advisories/24772 http://secunia.com/advisories/24791 http://www.novell.com/linux/security/advisories/2007_27_x.html http://secunia.com/advisories/25004 http://www.openbsd.org/errata39.html#021_xorg http://www.openbsd.org/errata40.html#011_xorg http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1 http://www.securityfocus.com/bid/23300 http://secunia.com/advisories/25006 http://security.gentoo.org/glsa/glsa-200705-10.xml http://secunia.com/advisories/25195 http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm http://secunia.com/advisories/25216 http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html http://www.debian.org/security/2007/dsa-1294 http://www.mandriva.com/security/advisories?name=MDKSA-2007:079 http://www.mandriva.com/security/advisories?name=MDKSA-2007:080 http://secunia.com/advisories/25305 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://www.vupen.com/english/advisories/2007/1548 http://www.vupen.com/english/advisories/2007/1217 https://exchange.xforce.ibmcloud.com/vulnerabilities/33419 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13243 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10523 http://www.securityfocus.com/archive/1/464816/100/0/threaded http://www.securityfocus.com/archive/1/464686/100/0/threaded https://usn.ubuntu.com/448-1/https://nvd.nist.gov

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook