Published: 20/03/2015 Updated: 31/12/2016

CVSS v2 Base Score: 8.5 | Impact Score: 10 | Exploitability Score: 6.8

VMScore: 756

Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont prior to 1.4.9 and 1.5.x prior to 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
x libxfont
x libxfont 1.5.0

libXfont could be made to crash or run programs as an administrator if it opened a specially crafted bdf font file ...

Ilja van Sprundel, Alan Coopersmith and William Robinet discovered multiple issues in libxfont's code to process BDF fonts, which might result in privilege escalation For the stable distribution (wheezy), these problems have been fixed in version 145-5 For the unstable distribution (sid), these problems will be fixed soon We recommend that you ...

An integer overflow flaw was found in the way libXfont processed certain Glyph Bitmap Distribution Format (BDF) fonts A malicious, local user could use this flaw to crash the XOrg server or, potentially, execute arbitrary code with the privileges of the XOrg server (CVE-2015-1802) An integer truncation flaw was discovered in the way libXfont pr ...

An integer truncation flaw was discovered in the way libXfont processed certain Glyph Bitmap Distribution Format (BDF) fonts A malicious, local user could use this flaw to crash the XOrg server or, potentially, execute arbitrary code with the privileges of the XOrg server ...

CWE-189 http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/http://www.debian.org/security/2015/dsa-3194 http://www.ubuntu.com/usn/USN-2536-1 http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.html http://www.securitytracker.com/id/1031935 http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.html http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html http://www.mandriva.com/security/advisories?name=MDVSA-2015:145 http://advisories.mageia.org/MGASA-2015-0113.html http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html http://lists.opensuse.org/opensuse-updates/2015-12/msg00074.html https://security.gentoo.org/glsa/201507-21 http://rhn.redhat.com/errata/RHSA-2015-1708.html http://www.securityfocus.com/bid/73279 https://usn.ubuntu.com/2536-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-1804

CVE-2015-1804

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect