Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libxfont | Jul 30, 2024 | Sep 13, 2006 |
| Gentoo Linux | — | Upgrade x11-libs/libXfont.Upgrade x11-base/xorg-x11. | Oct 30, 2017 | Sep 12, 2006 |
| Suse | — | Upgrade glibc-32bitUpgrade glibc-develUpgrade glibc-localeUpgrade xorg-x11-XvfbUpgrade glibc-locale-64bitUpgrade xorg-x11-libs-64bitUpgrade xorg-x11-fonts-75dpiUpgrade xorg-x11-develUpgrade glibc-devel-32bitUpgrade xorg-x11-fonts-100dpiUpgrade bootsplash-theme-SuSE-NLDUpgrade glibc-profile-x86Upgrade glibc-i18ndataUpgrade xorg-x11Upgrade xorg-x11-fonts-cyrillicUpgrade lvm2Upgrade xorg-x11-libsUpgrade glibc-infoUpgrade glibc-x86Upgrade xorg-x11-XnestUpgrade ddrescueUpgrade bootsplash-theme-SuSE-SLESUpgrade release-notes-slesUpgrade glibc-profile-64bitUpgrade xorg-x11-fonts-scalableUpgrade glibc-profile-32bitUpgrade OpenIPMIUpgrade OpenIPMI-develUpgrade timezoneUpgrade xorg-x11-XvncUpgrade glibcUpgrade glibc-locale-32bitUpgrade glibc-htmlUpgrade glibc-locale-x86Upgrade xorg-x11-serverUpgrade kshUpgrade ipmitoolUpgrade xorg-x11-sdkUpgrade xorg-x11-docUpgrade ksh-develUpgrade glibc-64bitUpgrade xorg-x11-devel-64bitUpgrade glibc-profileUpgrade grubUpgrade xorg-x11-server-glxUpgrade xorg-x11-libs-x86Upgrade XFree86-serverUpgrade ivmanUpgrade xorg-x11-fonts-syriacUpgrade xorg-x11-manUpgrade xorg-x11-devel-32bitUpgrade glibc-devel-64bitUpgrade nscdUpgrade xorg-x11-libs-32bit | Feb 17, 2015 | Sep 12, 2006 |
| Ubuntu | — | Upgrade libfs6Upgrade xserver-xorgUpgrade libxfont1 | Nov 8, 2024 | Sep 13, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub