CVE-2007-1351 | BDVDB-2026-23333 Detail
Description#
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.redhat.com/support/errata/RHSA-2007-0150.html
- http://secunia.com/advisories/24745
- http://secunia.com/advisories/24921
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810
- http://secunia.com/advisories/33937
- http://www.trustix.org/errata/2007/0013/
- http://secunia.com/advisories/24771
- http://security.gentoo.org/glsa/glsa-200705-02.xml
- http://secunia.com/advisories/24889
- http://secunia.com/advisories/24770
- http://secunia.com/advisories/25006
- http://secunia.com/advisories/24756
- http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=498954
- http://secunia.com/advisories/25495
- http://secunia.com/advisories/24996
Show all 40
- http://www.securityfocus.com/bid/23283
- http://www.redhat.com/support/errata/RHSA-2007-0126.html
- http://www.securityfocus.com/bid/23300
- http://support.apple.com/kb/HT3438
- http://security.gentoo.org/glsa/glsa-200705-10.xml
- http://www.ubuntu.com/usn/usn-448-1
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:080
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733
- http://www.novell.com/linux/security/advisories/2007_6_sr.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:081
- http://www.debian.org/security/2008/dsa-1454
- http://secunia.com/advisories/24758
- http://www.vupen.com/english/advisories/2007/1264
- http://www.securitytracker.com/id?1017857
- http://secunia.com/advisories/24885
- http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm
- http://secunia.com/advisories/25096
- http://secunia.com/advisories/25195
- http://rhn.redhat.com/errata/RHSA-2007-0125.html
- http://secunia.com/advisories/24741
- http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html
- http://secunia.com/advisories/24776
- http://secunia.com/advisories/28333
- http://secunia.com/advisories/24768
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.