541 matches found
CVE-2014-0209
CVE-2014-0209 (libXfont) affects X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901, with multiple integer overflows in FontFileAddEntry and lexAlias that may allow local privilege escalation by adding a large fonts.dir or fonts.alias file to the font path, triggering a heap-based buffer ov...
CVE-2014-0211
CVE-2014-0211 involves multiple integer overflows in X.Org libXfont (functions fs_get_reply, fs_alloc_glyphs, fs_read_extent_info) that could allow a remote X font server to trigger a buffer overflow and potentially execute arbitrary code. Affected versions are libXfont before 1.4.8 and 1.4.9x be...
CVE-2014-0211
Multiple integer overflows in the 1 fsgetreply, 2 fsallocglyphs, and 3 fsreadextentinfo functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow...
CVE-2014-0210
Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the 1 fsrecvconnsetup, 2 fsreadopenfont, 3 fsreadqueryinfo, 4 fsreadextentinfo, 5 fsreadglyphs, 6 fsreadlist, or 7...
[USN-2211-1] libXfont vulnerabilities
========================================================================== Ubuntu Security Notice USN-2211-1 May 14, 2014 libxfont vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
libXfont multiple security vulnerabilities
DoS, memory corruptions...
[oss-security] Fwd: [ANNOUNCE] X.Org Security Advisory: Multiple issues in libXfont
ANNOUNCE XOrg Security Advisory: Multiple issues in libXfont.eml Тема: ANNOUNCE X.Org Security Advisory: Multiple issues in libXfont От: Alan Coopersmith [email protected] Дата: 13.05.2014 19:08 Кому: [email protected] Копия: [email protected], [email protected] X.Org Securi...
Ubuntu 14.04 LTS : libXfont vulnerabilities (USN-2211-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2211-1 advisory. Ilja van Sprundel discovered that libXfont incorrectly handled font metadata file parsing. A local attacker could use this issue to cause libXfont to...
USN-2211-1: libXfont vulnerabilities
Ilja van Sprundel discovered that libXfont incorrectly handled font metadata file parsing. A local attacker could use this issue to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges. CVE-2014-0209 Ilja van Sprundel discovered that libXfont incorrectly handled...
USN-2211-1 libxfont vulnerabilities
Ilja van Sprundel discovered that libXfont incorrectly handled font metadata file parsing. A local attacker could use this issue to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges. CVE-2014-0209 Ilja van Sprundel discovered that libXfont incorrectly handled...
Debian DSA-2927-1 : libxfont - security update
Ilja van Sprundel of IOActive discovered several security issues in the X.Org libXfont library, which may allow a local, authenticated user to attempt to raise privileges; or a remote attacker who can control the font server to attempt to execute code with the privileges of the X server. -...
FreeBSD : libXfont -- X Font Service Protocol and Font metadata file handling issues (b060ee50-daba-11e3-99f2-bcaec565249c)
Alan Coopersmith reports : Ilja van Sprundel, a security researcher with IOActive, has discovered several issues in the way the libXfont library handles the responses it receives from xfs servers, and has worked with X.Org's security team to analyze, confirm, and fix these issues. Most of these...
[SECURITY] [DSA 2927-1] libxfont security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2927-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 13, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2927-1] libxfont security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2927-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 13, 2014 http://www.debian.org/security/faq -...
CVE-2014-0211
Multiple integer overflows in the 1 fsgetreply, 2 fsallocglyphs, and 3 fsreadextentinfo functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow...
UBUNTU-CVE-2014-0211
Multiple integer overflows in the 1 fsgetreply, 2 fsallocglyphs, and 3 fsreadextentinfo functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow...
UBUNTU-CVE-2014-0210
Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the 1 fsrecvconnsetup, 2 fsreadopenfont, 3 fsreadqueryinfo, 4 fsreadextentinfo, 5 fsreadglyphs, 6 fsreadlist, or 7...
CVE-2014-0209
Multiple integer overflows in the 1 FontFileAddEntry and 2 lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffe...
Debian Security Advisory DSA 2927-1 (libxfont - security update)
Ilja van Sprundel of IOActive discovered several security issues in the X.Org libXfont library, which may allow a local, authenticated user to attempt to raise privileges; or a remote attacker who can control the font server to attempt to execute code with the privileges of the X server...