Integer overflow

2014-05-1514:55:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.3%

JSON

Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.

CPENameOperatorVersion
ubuntu_linuxeq13.10
ubuntu_linuxeq12.10
ubuntu_linuxeq14.04
ubuntu_linuxeq12.4 lts
ubuntu_linuxeq10.4 lts
libxfontle1.4.7
libxfonteq1.4.4
libxfonteq1.2.7
libxfonteq1.2.6
libxfonteq1.3.3

Name	Operator	Version
ubuntu_linux	eq	13.10
ubuntu_linux	eq	12.10
ubuntu_linux	eq	14.04
ubuntu_linux	eq	12.4 lts
ubuntu_linux	eq	10.4 lts
libxfont	le	1.4.7
libxfont	eq	1.4.4
libxfont	eq	1.2.7
libxfont	eq	1.2.6
libxfont	eq	1.3.3