CVE-2007-1351

2007-04-0601:19:00

Debian Security Bug Tracker

security-tracker.debian.org

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.05 Low

EPSS

Percentile

92.8%

JSON

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.

OSVersionArchitecturePackageVersionFilename
Debian12allfreetype< 2.3.5-1freetype_2.3.5-1_all.deb
Debian11allfreetype< 2.3.5-1freetype_2.3.5-1_all.deb
Debian10allfreetype< 2.3.5-1freetype_2.3.5-1_all.deb
Debian999allfreetype< 2.3.5-1freetype_2.3.5-1_all.deb
Debian13allfreetype< 2.3.5-1freetype_2.3.5-1_all.deb
Debian12alllibxfont< 1:1.2.2-2libxfont_1:1.2.2-2_all.deb
Debian11alllibxfont< 1:1.2.2-2libxfont_1:1.2.2-2_all.deb
Debian10alllibxfont< 1:1.2.2-2libxfont_1:1.2.2-2_all.deb
Debian999alllibxfont< 1:1.2.2-2libxfont_1:1.2.2-2_all.deb
Debian13alllibxfont< 1:1.2.2-2libxfont_1:1.2.2-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	freetype	< 2.3.5-1	freetype_2.3.5-1_all.deb
Debian	11	all	freetype	< 2.3.5-1	freetype_2.3.5-1_all.deb
Debian	10	all	freetype	< 2.3.5-1	freetype_2.3.5-1_all.deb
Debian	999	all	freetype	< 2.3.5-1	freetype_2.3.5-1_all.deb
Debian	13	all	freetype	< 2.3.5-1	freetype_2.3.5-1_all.deb
Debian	12	all	libxfont	< 1:1.2.2-2	libxfont_1:1.2.2-2_all.deb
Debian	11	all	libxfont	< 1:1.2.2-2	libxfont_1:1.2.2-2_all.deb
Debian	10	all	libxfont	< 1:1.2.2-2	libxfont_1:1.2.2-2_all.deb
Debian	999	all	libxfont	< 1:1.2.2-2	libxfont_1:1.2.2-2_all.deb
Debian	13	all	libxfont	< 1:1.2.2-2	libxfont_1:1.2.2-2_all.deb