Debian Security Advisory DSA 360-1 (xfstt)

The remote host is missing an update to xfstt announced via advisory DSA 360-1. OpenVAS Vulnerability Test $Id: deb3601.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 360-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2003-0581

...

CVE-2003-0581

X Fontserver for Truetype fonts xfstt 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a 1 FSQueryXExtents8 or 2 FSQueryXBitmaps8 packet, and possibly other types of packets, with a large numranges value, which causes an out-of-bounds array access...

CVE-2003-0581

CVE-2003-0581 concerns xfstt, a TrueType font server for the X Window System. The entry covers two issues: CAN-2003-0581 (buffer overruns in certain requests such as FS_QueryXExtents8/FS_QueryXBitmaps8, enabling remote DoS or possibly arbitrary code execution) and CAN-2003-0625 (handshake data co...