CVE-2013-6462

2014-01-0918:55:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2013-6462

x.org

libxfont

buffer overflow

denial of service

remote attack

nvd

7.9 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.217 Low

EPSS

Percentile

96.4%

JSON

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

CPENameOperatorVersion
x:libxfontx libxfonteq1.4.4
x:libxfontx libxfonteq1.2.1
x:libxfontx libxfonteq1.2.7
x:libxfontx libxfonteq1.2.6
x:libxfontx libxfonteq1.3.3
x:libxfontx libxfonteq1.3.2
x:libxfontx libxfonteq1.3.4
x:libxfontx libxfonteq1.3.1
x:libxfontx libxfonteq1.4.0
x:libxfontx libxfonteq1.2.4

CPE	Name	Operator	Version
x:libxfont	x libxfont	eq	1.4.4
x:libxfont	x libxfont	eq	1.2.1
x:libxfont	x libxfont	eq	1.2.7
x:libxfont	x libxfont	eq	1.2.6
x:libxfont	x libxfont	eq	1.3.3
x:libxfont	x libxfont	eq	1.3.2
x:libxfont	x libxfont	eq	1.3.4
x:libxfont	x libxfont	eq	1.3.1
x:libxfont	x libxfont	eq	1.4.0
x:libxfont	x libxfont	eq	1.2.4