CVEvulnerability

CVE-2014-0210

7.5 HIGH Published 2014-05-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-05-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the (1) _fs_recv_conn_setup, (2) fs_read_open_font, (3) fs_read_query_info, (4) fs_read_extent_info, (5) fs_read_glyphs, (6) fs_read_list, or (7) fs_read_list_info function.

Affected configurations

• x libxfont (<= 1.4.7) • x libxfont 1.2.3 • x libxfont 1.2.4 • x libxfont 1.2.5 • x libxfont 1.2.6 • x libxfont 1.2.7 • x libxfont 1.2.8 • x libxfont 1.2.9 • x libxfont 1.3.0 • x libxfont 1.3.1 • x libxfont 1.3.2 • x libxfont 1.3.3 • x libxfont 1.3.4 • x libxfont 1.4.0 • x libxfont 1.4.1 • x libxfont 1.4.2 • x libxfont 1.4.3 • x libxfont 1.4.4 • x libxfont 1.4.5 • x libxfont 1.4.6 • x libxfont 1.4.99 • canonical ubuntu linux 10.04 • canonical ubuntu linux 12.04 • canonical ubuntu linux 12.10 • canonical ubuntu linux 13.10 • canonical ubuntu linux 14.04

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References