The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx X11 | — | Apply OS X security update 2009-001 | Dec 16, 2011 | Apr 5, 2007 |
| Debian | — | Upgrade libxfontUpgrade freetype | Jul 30, 2024 | Apr 6, 2007 |
| Gentoo Linux | — | Upgrade media-libs/freetype.Upgrade net-misc/tightvnc.Upgrade x11-libs/libXfont. | Oct 30, 2017 | Apr 5, 2007 |
| Oracle_linux | — | Upgrade libXfont-develUpgrade libXfont | Oct 16, 2024 | Apr 6, 2007 |
| Suse | — | Upgrade ftbenchUpgrade ftstringUpgrade ftgammaUpgrade ftlintUpgrade ftsdfUpgrade ftvalidUpgrade freetype2-32bitUpgrade ft2demosUpgrade ftgridUpgrade freetype2-profile-tti35Upgrade freetype2-x86Upgrade ftmultiUpgrade libfreetype6Upgrade freetype2-develUpgrade freetype2Upgrade ftviewUpgrade ftdumpUpgrade ftdiffUpgrade freetype2-devel-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libxfont1Upgrade xserver-xorg-coreUpgrade libfreetype6 | Nov 8, 2024 | Apr 6, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub