XFree86 4.3.0 integer overflows in font libraries [LWN.net]

Package(s):

XFree86

CVE #(s):

CAN-2003-0730

Created:

September 12, 2003

Updated:

November 25, 2003

Description:

Several vulnerabilities were discovered by blexim(at)hush.com in the font libraries of XFree86 version 4.3.0 and earlier. These bugs could potentially lead to execution of arbitrary code or a DoS by a remote user in any way that calls these functions, which are related to the transfer and enumeration of fonts from font servers to clients. See the advisory for additional details.

Alerts:

Red Hat	RHSA-2003:286-01	2003-11-25
Red Hat	RHSA-2003:287-01	2003-11-25
Red Hat	RHSA-2003:288-01	2003-11-17
Debian	DSA-380-1	2003-09-12
Mandrake	MDKSA-2003:089	2003-09-11

(Log in to post comments)