NetSight
IP …
high7.5Public exploit code

CVE-2002-1317

Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.

Affected products

VendorProductAffected versions
Xfree86 ProjectX11r6
Versions 3.3, 3.3.2, 3.3.3, 3.3.4, 3.3.5
SgiIrix
Versions 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5
HpHp-Ux
Versions 10.10, 10.20, 10.24, 11.00, 11.04, 11.11
SunSolaris
Versions 2.5.1, 2.6, 7.0, 8.0, 9.0
SunSunos
All versions
Versions 5.5.1, 5.7, 5.8

References