NetSight
IP …
critical10.0Public exploit code

CVE-2004-0083

Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font ali…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.

Affected products

VendorProductAffected versions
Xfree86 ProjectX11r6
Versions 4.1.0, 4.1.11, 4.1.12, 4.2.0, 4.2.1, 4.3.0
OpenbsdOpenbsd
Versions 3.3, 3.4

References