Mandrake Linux Security Advisory : xorg-x11 (MDKSA-2006:148)

An integer overflow flaw was discovered in how xorg-x11/XFree86 handles PCF files. A malicious authorized client could exploit the issue to cause a DoS crash or potentially execute arbitrary code with root privileges on the xorg-x11/XFree86 server. Updated packages are patched to address this...

FreeType LWFN文件处理远程缓冲区溢出漏洞

FreeType是一个流行的字体函数库。 FreeType在处理PCF字体时存在整数溢出，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果用户受骗使用链接到FreeType的应用程序加载了特制的字体文件的话，就会导致拒绝服务或执行任意代码。 FreeType FreeType 2.2.1 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1178-1）以及相应补丁: DSA-1178-1：New freetype packages fix execution of arbitrary code...

Debian DSA-1193-1 : xfree86 - several vulnerabilities

Several vulnerabilities have been discovered in the X Window System, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3467 Chris Evan discovered an integer overflow in the code t...

DSA-1193-1 xfree86

Bulletin has no description...

DSA-1178-1 freetype

Bulletin has no description...

LibXfont: Multiple integer overflows

Background libXfont is the X.Org Xfont library, some parts are based on the FreeType code base. Description Several integer overflows have been found in the PCF font parser. Impact A local attacker could possibly execute arbitrary code or crash the Xserver by enticing a user to load a specially...

XFree86 security update

CentOS Errata and Security Advisory CESA-2006:0635 Updated XFree86 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an implementation of the...

XFree86 security update

CentOS Errata and Security Advisory CESA-2006:0635-01 Updated XFree86 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an implementation of...

Important: Red Hat Security Advisory: xorg-x11 security update

Updated X.org packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. X.org is an open source implementation of the X Window System. It provides the basic low-level...

freetype: integer overflow vulnerability due to incomplete fix for CVE-2006-1861

Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861...

Important: Red Hat Security Advisory: XFree86 security update

Updated XFree86 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an implementation of the X Window System, which provides the core...

freetype: integer overflow vulnerability due to incomplete fix for CVE-2006-1861

Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861...

XFree86 / X11.org integer overflow

Integer overflow on PCF fonts parsing...

[SA21446] XFree86 PCF Integer Overflow Vulnerabilities

TITLE: XFree86 PCF Integer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA21446 VERIFY ADVISORY: http://secunia.com/advisories/21446/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: XFree86 4.5.x http://secunia.com/product/4870/ XFree86 4.4.x...

CVE-2006-3467

Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861...

CVE-2006-3467

Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861...

CVE-2006-3467

CVE-2006-3467 concerns an integer overflow in FreeType, pre-2.2, allowing remote DoS and possibly arbitrary code execution via a crafted PCF file (partial fix in CVE-2006-1861). Connected documents show Solaris 10 Xsun/X11 patches addressing this family of issues (e.g., patch sets 119060-64 for x...

CVE-2006-3467

Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861...

CVE-2006-3467

Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861...

CVE-2006-3467: Undefined Security Weakness

Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861...