NetSight
IP …
high8.5

CVE-2007-1351

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenti…

Impact

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.

Affected products

VendorProductAffected versions
UbuntuUbuntu Linux
Versions 5.10, 6.06_lts, 6.10
X.OrgLibxfont
Version 1.2.2
Xfree86 ProjectX11r6
Versions 4.3.0, 4.3.0.1, 4.3.0.2
RpathRpath Linux
Version 1
RedhatEnterprise Linux
Versions 2.1, 3.0, 4.0, 5.0
RedhatEnterprise Linux Desktop
Versions 3.0, 4.0
RedhatLinux Advanced Workstation
Version 2.1
OpenbsdOpenbsd
Versions 3.9, 4.0
MandrakesoftMandrake Multi Network Firewall
Version 2.0

Weakness classification

CWE-189

References