CVE-2007-1351
High
Description
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
SeverityHigh
CVSS8.5
Exploit probability—
Product
X.org Libxfont
PublishedApr 6, 2007
First seenApr 6, 2007
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x.org libxfont | 1.2.2 | — |
| ubuntu ubuntu_linux | 5.10, 6.06_lts, 6.10 | — |
| xfree86_project x11r6 | 4.3.0, 4.3.0.1, 4.3.0.2 | — |
| rpath rpath_linux | 1 | — |
| redhat enterprise_linux | 2.1, 3.0, 4.0, 5.0 | — |
| redhat enterprise_linux_desktop | 3.0, 4.0 | — |
| redhat linux_advanced_workstation | 2.1 | — |
| openbsd openbsd | 3.9, 4.0 | — |
| mandrakesoft mandrake_multi_network_firewall | 2.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.