The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.

debiancve 1

prion 1

veracode 2

cve 1

ubuntucve 1

nessus 17

f5 2

suse 3

openvas 18

amazon 1

fedora 2

securityvulns 2