Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx X11 | — | Apply OS X security update 2009-001 | Dec 16, 2011 | Apr 5, 2007 |
| Debian | — | Upgrade libxfontUpgrade freetype | Jul 30, 2024 | Apr 6, 2007 |
| Gentoo Linux | — | Upgrade x11-libs/libXfont.Upgrade net-misc/tightvnc.Upgrade media-libs/freetype. | Oct 30, 2017 | Apr 5, 2007 |
| Oracle_linux | — | Upgrade libXfont-develUpgrade libXfont | Oct 16, 2024 | Apr 6, 2007 |
| Suse | — | Upgrade freetype2-develUpgrade ftdiffUpgrade freetype2Upgrade libfreetype6Upgrade freetype2-devel-32bitUpgrade ftdumpUpgrade ftviewUpgrade ftsdfUpgrade ftstringUpgrade ftlintUpgrade freetype2-x86Upgrade ftgridUpgrade ftvalidUpgrade ftmultiUpgrade freetype2-32bitUpgrade ftbenchUpgrade ft2demosUpgrade ftgammaUpgrade freetype2-profile-tti35 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade xserver-xorg-coreUpgrade libxfont1Upgrade libfreetype6 | Nov 8, 2024 | Apr 6, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub