7.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.025 Low
EPSS
Percentile
90.1%
Ilja van Sprundel discovered that libXfont incorrectly handled font
metadata file parsing. A local attacker could use this issue to cause
libXfont to crash, or possibly execute arbitrary code in order to gain
privileges. (CVE-2014-0209)
Ilja van Sprundel discovered that libXfont incorrectly handled X Font
Server replies. A malicious font server could return specially-crafted data
that could cause libXfont to crash, or possibly execute arbitrary code.
This issue only affected Ubuntu 10.04 LTS, Ubuntu 12.04 LTS, Ubuntu 12.10
and Ubuntu 13.10. (CVE-2014-0210, CVE-2014-0211)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 14.04 | noarch | libxfont1 | < 1:1.4.7-1ubuntu0.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | libxfont-dev | < 1:1.4.7-1ubuntu0.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | libxfont1-dbg | < 1:1.4.7-1ubuntu0.1 | UNKNOWN |
Ubuntu | 14.04 | noarch | libxfont1-udeb | < 1:1.4.7-1ubuntu0.1 | UNKNOWN |
Ubuntu | 13.10 | noarch | libxfont1 | < 1:1.4.6-1ubuntu0.2 | UNKNOWN |
Ubuntu | 13.10 | noarch | libxfont-dev | < 1:1.4.6-1ubuntu0.2 | UNKNOWN |
Ubuntu | 13.10 | noarch | libxfont1-dbg | < 1:1.4.6-1ubuntu0.2 | UNKNOWN |
Ubuntu | 13.10 | noarch | libxfont1-udeb | < 1:1.4.6-1ubuntu0.2 | UNKNOWN |
Ubuntu | 12.10 | noarch | libxfont1 | < 1:1.4.5-2ubuntu0.12.10.2 | UNKNOWN |
Ubuntu | 12.10 | noarch | libxfont-dev | < 1:1.4.5-2ubuntu0.12.10.2 | UNKNOWN |