Debian Security Advisory DSA 2838-1 (libxfont - buffer overflow)

It was discovered that a buffer overflow in the processing of Glyph Bitmap Distribution fonts BDF could result in the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2838.nasl 6715 2017-07-13 09:57:40Z teissa $ Auto-generated from advisory DSA 2838-1 using nvtgen 1.0 Script versio...

DSA-2838-1 libxfont - buffer overflow

Bulletin has no description...

Debian: Security Advisory (DSA-2838-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libXfont -- Stack buffer overflow in parsing of BDF font files in libXfont

freedesktop.org reports: A BDF font file containing a longer than expected string can cause a buffer overflow on the stack. Testing in X servers built with Stack Protector restulted in an immediate crash when reading a user-proveded specially crafted font. As libXfont is used to read user-specifi...

libXfont memory corruption

Memory corruption on compressed font parsing...

Oracle Linux 5 : Important: / libXfont (ELSA-2008-0064)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0064 advisory. 1.2.2-1.0.3 - cve-2008-0006.patch: XFS Integer Overflow Vulnerability Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 / 6 : libXfont (ELSA-2011-1154)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1154 advisory. 1.4.1-2 - cve-2011-2895.patch: LZW decompression heap corruption Tenable has extracted the preceding description block directly from the Oracle Linux securi...

Oracle Linux 5 : Important: / libXfont (ELSA-2007-0132)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0132 advisory. 1.2.2-1.0.2.el5 - Rebuild because of forgotten changelog entry. 1.2.2-1.0.1.el5 - Fix for bug 234058, cve-2207-1351/1352 Tenable has extracted the...

RHEL 5 : libXfont (RHSA-2011:1834)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1834 advisory. - BSD compress LZW decoder buffer overflow CVE-2011-2895 Note that Nessus has not tested for this issue but has instead relied only on the...

Scientific Linux Security Update : libXfont on SL5.x i386/x86_64

A heap based buffer overflow flaw was found in the way the X.Org server handled malformed font files. A malicious local user could exploit this issue to potentially execute arbitrary code with the privileges of the X.Org server. CVE-2008-0006 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

Scientific Linux Security Update : xorg-x11 on SL4.x i386/x86_64

X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. These xorg-x11 packages also provide the X.Org libXfont runtime library. A buffer overflow flaw was found in the way the...

Scientific Linux Security Update : libXfont on SL5.x, SL6.x i386/x86_64

The libXfont packages provide the X.Org libXfont runtime library. X.Org is an open source implementation of the X Window System. A buffer overflow flaw was found in the way the libXfont library, used by the X.Org server, handled malformed font files compressed using UNIX compress. A malicious,...

CentOS Update for libXfont CESA-2011:1154 centos5 x86_64

Check for the Version of libXfont OpenVAS Vulnerability Test CentOS Update for libXfont CESA-2011:1154 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CentOS Update for libXfont CESA-2011:1154 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Important: Red Hat Security Advisory: libXfont security update

Updated libXfont packages that fix one security issue are now available for Red Hat Enterprise Linux 5.6 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

SuSE 11.1 Security Update : Xorg X11 (SAT Patch Number 5103)

Specially crafted font files could cause a buffer overflow in applications that use libXfont to load such files. CVE-2011-2895 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

xorg-x11-libs (important)

Specially crafted font files could cause a buffer overflow in applications that use libXfont to load such files CVE-2011-2895...

Mandriva Update for libxfont MDVSA-2011:153 (libxfont)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for libxfont MDVSA-2011:153 (libxfont)

Check for the Version of libxfont OpenVAS Vulnerability Test Mandriva Update for libxfont MDVSA-2011:153 libxfont Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Linux Security Advisory : libxfont (MDVSA-2011:153)

A vulnerability has been discovered and corrected in libxfont : The LZW decompressor in 1 the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and 2 compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD, FreeType 2.1.9, and othe...