Lucene search

K
freebsdFreeBSD304409C3-C3EF-11E0-8AA5-485D60CB5385
HistoryJul 26, 2011 - 12:00 a.m.

libXfont -- possible local privilege escalation

2011-07-2600:00:00
vuxml.freebsd.org
9

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.9%

Tomas Hoger reports:

The compress/ LZW decompress implentation does not correctly
handle compressed streams that contain code words that were not
yet added to the decompression table. This may lead to
arbitrary memory corruption. Successfull exploitation may
possible lead to a local privilege escalation.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlibxfont< 1.4.4_1,1UNKNOWN

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.9%