Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libxfont | Jul 30, 2024 | Sep 13, 2006 |
| Gentoo Linux | — | Upgrade x11-base/xorg-x11.Upgrade x11-libs/libXfont. | Oct 30, 2017 | Sep 12, 2006 |
| Suse | — | Upgrade xorg-x11-develUpgrade xorg-x11-fonts-scalableUpgrade glibc-locale-x86Upgrade glibc-develUpgrade lvm2Upgrade xorg-x11-XvfbUpgrade xorg-x11-libs-64bitUpgrade glibc-32bitUpgrade xorg-x11-serverUpgrade glibc-x86Upgrade timezoneUpgrade bootsplash-theme-SuSE-SLESUpgrade bootsplash-theme-SuSE-NLDUpgrade xorg-x11-fonts-75dpiUpgrade xorg-x11-XnestUpgrade OpenIPMI-develUpgrade glibc-infoUpgrade glibcUpgrade xorg-x11-XvncUpgrade xorg-x11Upgrade xorg-x11-libsUpgrade glibc-i18ndataUpgrade OpenIPMIUpgrade glibc-profile-x86Upgrade glibc-devel-32bitUpgrade xorg-x11-fonts-cyrillicUpgrade glibc-profile-32bitUpgrade xorg-x11-fonts-100dpiUpgrade ddrescueUpgrade release-notes-slesUpgrade glibc-profile-64bitUpgrade glibc-htmlUpgrade glibc-localeUpgrade glibc-locale-64bitUpgrade glibc-locale-32bitUpgrade ksh-develUpgrade xorg-x11-docUpgrade xorg-x11-devel-64bitUpgrade grubUpgrade ivmanUpgrade kshUpgrade xorg-x11-sdkUpgrade xorg-x11-libs-32bitUpgrade xorg-x11-server-glxUpgrade xorg-x11-fonts-syriacUpgrade xorg-x11-manUpgrade ipmitoolUpgrade glibc-profileUpgrade glibc-devel-64bitUpgrade XFree86-serverUpgrade xorg-x11-devel-32bitUpgrade nscdUpgrade xorg-x11-libs-x86Upgrade glibc-64bit | Feb 17, 2015 | Sep 12, 2006 |
| Ubuntu | — | Upgrade xserver-xorgUpgrade libxfont1Upgrade libfs6 | Nov 8, 2024 | Sep 13, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub