NetSight
IP …
critical10.0Public exploit code

CVE-2004-0084

Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated use…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.

Affected products

VendorProductAffected versions
Xfree86 ProjectX11r6
Versions 4.1.0, 4.1.11, 4.1.12, 4.2.0, 4.2.1, 4.3.0
OpenbsdOpenbsd
Versions 3.3, 3.4

References