CVE-2014-0210
HighSummary
Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply.
Risk Assessment
An attacker can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update libXfont to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in X.Org libXfont
See all- CVE-2015-1804High
The bdfReadCharacters function in X.Org libXfont before version 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values. This allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.
- CVE-2015-1803High
The bdfReadCharacters function in X.Org libXfont before version 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read. This allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file.
- CVE-2015-1802High
The bdfReadProperties function in X.Org libXfont before version 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a negative or large property count in a BDF font file.
- CVE-2014-0211High
Multiple integer overflows in the fs_get_reply, fs_alloc_glyphs, and fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow.
- CVE-2007-5199Critical
A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.
Original NVD description (English source)
Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the (1) _fs_recv_conn_setup, (2) fs_read_open_font, (3) fs_read_query_info, (4) fs_read_extent_info, (5) fs_read_glyphs, (6) fs_read_list, or (7) fs_read_list_info function.