CVE-2017-13720

Summary: LibXfont (libXfont and libXfont2) contains a vulnerability in the PatternMatch function (fontfile/fontdir.c). The flaw allows a buffer over-read during font pattern matching, potentially leading to information disclosure or a crash. It affects libXfont up to 1.5.2 and libXfont2 up to 2.x...

CVE-2017-13722

CVE-2017-13722 affects libXfont (and libXfont2) prior to versions 2.0.2 and 1.5.3 respectively. The issue arises in the PCF font handling: in bitmap/pcfread.c within pcfGetProperties a missing boundary check on PCF files allows a local, authenticated attacker to induce a buffer over-read, leading...

CVE-2007-1351

CVE-2007-1351 is an integer overflow in the FreeType/bdf loader path: bdfReadCharacters in bdfread.c causes a heap overflow when parsing crafted BDF fonts. Affected products include X.Org libXfont before 20070403 and FreeType 2.3.2 and earlier. Exploitation could lead to remote code execution on ...

CVE-2007-1352

The CVE-2007-1352 issue is an integer overflow in the FontFileInitTable function of X.Org libXfont before 20070403. The vulnerability allows remote authenticated users to cause a heap overflow by placing a long first line in the fonts.dir file, potentially enabling arbitrary code execution. Affec...