CVEvulnerability
CVE-2007-1351
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-04-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
Affected configurations
• ubuntu ubuntu linux 5.10
• ubuntu ubuntu linux 6.06 lts
• ubuntu ubuntu linux 6.10
• x.org libxfont 1.2.2
• xfree86 project x11r6 4.3.0
• xfree86 project x11r6 4.3.0.1
• xfree86 project x11r6 4.3.0.2
• rpath rpath linux 1
• redhat enterprise linux 2.1
• redhat enterprise linux 3.0
• redhat enterprise linux 4.0
• redhat enterprise linux 5.0
• redhat enterprise linux desktop 3.0
• redhat enterprise linux desktop 4.0
• redhat linux advanced workstation 2.1
• openbsd openbsd 3.9
• openbsd openbsd 4.0
• mandrakesoft mandrake multi network firewall 2.0
Related
Weakness · not in database (1)
References
- http://issues.foresightlinux.org/browse/FL-223 issues.foresightlinux.org
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501 Patch
- http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html lists.apple.com
- http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html lists.freedesktop.org
- http://rhn.redhat.com/errata/RHSA-2007-0125.html rhn.redhat.com
- http://secunia.com/advisories/24741 Vendor Advisory
- http://secunia.com/advisories/24745 secunia.com
- http://secunia.com/advisories/24756 secunia.com
- http://secunia.com/advisories/24758 secunia.com
- http://secunia.com/advisories/24765 secunia.com
- http://secunia.com/advisories/24768 secunia.com
- http://secunia.com/advisories/24770 Vendor Advisory
- http://secunia.com/advisories/24771 secunia.com
- http://secunia.com/advisories/24772 secunia.com
- http://secunia.com/advisories/24776 secunia.com
- http://secunia.com/advisories/24791 secunia.com
- http://secunia.com/advisories/24885 secunia.com
- http://secunia.com/advisories/24889 secunia.com
- http://secunia.com/advisories/24921 secunia.com
- http://secunia.com/advisories/24996 secunia.com
- http://secunia.com/advisories/25004 secunia.com
- http://secunia.com/advisories/25006 secunia.com
- http://secunia.com/advisories/25096 secunia.com
- http://secunia.com/advisories/25195 secunia.com
- http://secunia.com/advisories/25216 secunia.com
- http://secunia.com/advisories/25305 secunia.com
- http://secunia.com/advisories/25495 secunia.com
- http://secunia.com/advisories/28333 secunia.com
- http://secunia.com/advisories/30161 secunia.com
- http://secunia.com/advisories/33937 secunia.com
- http://security.gentoo.org/glsa/glsa-200705-02.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-200705-10.xml security.gentoo.org
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733 slackware.com
- http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=498954 sourceforge.net
- http://sourceforge.net/project/shownotes.php?release_id=498954 sourceforge.net
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1 sunsolve.sun.com
- http://support.apple.com/kb/HT3438 support.apple.com
- http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm support.avaya.com
- http://support.avaya.com/elmodocs2/security/ASA-2007-193.htm support.avaya.com
- http://www.debian.org/security/2007/dsa-1294 www.debian.org
- http://www.debian.org/security/2008/dsa-1454 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:079 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:080 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:081 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2007_27_x.html www.novell.com
- http://www.novell.com/linux/security/advisories/2007_6_sr.html www.novell.com
- http://www.openbsd.org/errata39.html#021_xorg www.openbsd.org
- http://www.openbsd.org/errata40.html#011_xorg www.openbsd.org
- http://www.redhat.com/support/errata/RHSA-2007-0126.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0132.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-0150.html www.redhat.com
- http://www.securityfocus.com/archive/1/464686/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/464816/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23283 Patch
- http://www.securityfocus.com/bid/23300 www.securityfocus.com
- http://www.securityfocus.com/bid/23402 www.securityfocus.com
- http://www.securitytracker.com/id?1017857 www.securitytracker.com
- http://www.trustix.org/errata/2007/0013/ www.trustix.org
- http://www.ubuntu.com/usn/usn-448-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2007/1217 www.vupen.com
- http://www.vupen.com/english/advisories/2007/1264 www.vupen.com
- http://www.vupen.com/english/advisories/2007/1548 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33417 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-1213 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810 oval.cisecurity.org
- http://issues.foresightlinux.org/browse/FL-223 issues.foresightlinux.org
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501 Patch
- http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html lists.apple.com
- http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html lists.freedesktop.org
- http://rhn.redhat.com/errata/RHSA-2007-0125.html rhn.redhat.com
- http://secunia.com/advisories/24741 Vendor Advisory
- http://secunia.com/advisories/24745 secunia.com
- http://secunia.com/advisories/24756 secunia.com
- http://secunia.com/advisories/24758 secunia.com
- http://secunia.com/advisories/24765 secunia.com
- http://secunia.com/advisories/24768 secunia.com