CVE-2011-2895

Technical details for CVE-2011-2895 are not provided in the connected documents; public specifics (affected products, fixes, exploit info) are not available here. Monitor for updates.

CVE-2017-16611

Summary: CVE-2017-16611 affects libXfont (<=1.5.4) and libXfont2 (

CVE-2015-1802

The CVE-2015-1802 issue affects X.Org libXfont: the bdfReadProperties function in bitmap/bdfread.c (versions prior to 1.4.9 and 1.5.x prior to 1.5.1) can be exploited by remote authenticated users to cause a denial of service (out-of-bounds write) and, potentially, arbitrary code execution via a ...

CVE-2015-1804

CVE-2015-1804 (libXfont) : The bdfReadCharacters function in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 mishandles type conversion for metrics in BDF fonts. This enables remote authenticated users to trigger a denial of service (out-of-bounds memory access) and potentially execute arbitra...

CVE-2015-1803

CVE-2015-1803 affects the X.Org libXfont library. The bdfReadCharacters function in bitmap/bdfread.c does not properly handle unreadable character bitmaps, allowing remote authenticated users to trigger a denial of service via NULL pointer dereference and crash, with the potential to execute arbi...

CVE-2014-0210

The CVE-2014-0210 entry affects X.Org libXfont prior to 1.4.8 and 1.4.9x prior to 1.4.99.901, with multiple buffer overflows in the xfs protocol replies that could allow a remote font server to execute arbitrary code. Connected advisories confirm affected components and versions and suggest upgra...

CVE-2014-0211

CVE-2014-0211 involves multiple integer overflows in X.Org libXfont (functions fs_get_reply, fs_alloc_glyphs, fs_read_extent_info) that could allow a remote X font server to trigger a buffer overflow and potentially execute arbitrary code. Affected versions are libXfont before 1.4.8 and 1.4.9x be...

CVE-2013-6462

CVE-2013-6462 : A stack-based buffer overflow exists in libXfont (X.Org) 1.1–1.4.6, in the bdfReadCharacters function (bitmap/bdfread.c) when parsing Glyph Bitmap Distribution Format (BDF) fonts. A long string in a BDF font’s character name can cause a crash or potentially allow remote arbitrary ...

CVE-2014-0209

CVE-2014-0209 (libXfont) affects X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901, with multiple integer overflows in FontFileAddEntry and lexAlias that may allow local privilege escalation by adding a large fonts.dir or fonts.alias file to the font path, triggering a heap-based buffer ov...

CVE-2007-5199

The CVE relates to X.Org libXfont 1.3.1, where a single-byte overflow in catalogue.c is exposed. Several connected sources describe a buffer overflow that could be triggered remotely, with potential to crash the application and, in some reports, possibly allow arbitrary code execution. Affected c...