CVE-2008-0006
High
Description
Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Sun Solaris Libfont
PublishedJan 18, 2008
First seenJan 18, 2008
How to fix
Vendor advisories
- redhat.com/archives/fedora-package-announce/2008-January/msg00704.html
- redhat.com/archives/fedora-package-announce/2008-January/msg00674.html
- usn.ubuntu.com/571-1/
- redhat.com/archives/fedora-package-announce/2008-January/msg00771.html
- redhat.com/archives/fedora-package-announce/2008-January/msg00641.html
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sun solaris_libfont | No range specified | — |
| sun solaris_libxfont | No range specified | — |
| x.org xserver | v ≤ 1.4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.