Privilege Escalation

libXfont.so is vulnerable to privilege escalation. An integer overflow bug in FontFileAddEntry and lexAlias allows a local attacker to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which results in a heap-based buffer overflow...

CVE-2014-0209

CVE-2014-0209 (libXfont) affects X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901, with multiple integer overflows in FontFileAddEntry and lexAlias that may allow local privilege escalation by adding a large fonts.dir or fonts.alias file to the font path, triggering a heap-based buffer ov...