X.Org libXfont Multiple Integer Overflow and Memory Corruption Vulnerabilities
BID:67382
Info
X.Org libXfont Multiple Integer Overflow and Memory Corruption Vulnerabilities
| Bugtraq ID: | 67382 |
| Class: | Unknown |
| CVE: |
CVE-2014-0209 CVE-2014-0210 CVE-2014-0211 |
| Remote: | Yes |
| Local: | No |
| Published: | May 12 2014 12:00AM |
| Updated: | Jul 15 2015 12:16AM |
| Credit: | Ilja van Sprundel |
| Vulnerable: |
X.org LibXfont 1.3.1 X.org LibXfont 1.2.2 X.org LibXfont 1.2.1 X.org LibXfont 1.2 X.org LibXfont 1.1 X.org LibXfont 1.0 X.org LibXfont 1.4.4 X.org LibXfont 1.4.3 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 RedHat Enterprise Linux Desktop Workstation 5 client Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux 5 Server Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 6 CentOS CentOS 5 Avaya IQ 5.2 Avaya IQ 5.1.1 Avaya IQ 5.1 Avaya IQ 5 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Manager 6.1.3 Avaya Aura System Manager 6.1.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 6.0 SP1 Avaya Aura System Manager 6.0 Avaya Aura Session Manager 5.2 SP2 Avaya Aura Session Manager 5.2 SP1 Avaya Aura Session Manager 5.2 Avaya Aura Presence Services 6.1.1 Avaya Aura Presence Services 6.1 Avaya Aura Presence Services 6.0 Avaya Aura Experience Portal 6.0 |
| Not Vulnerable: | |
Discussion
X.Org libXfont Multiple Integer Overflow and Memory Corruption Vulnerabilities
X.Org libXfont is prone to multiple integer-overflow and memory-corruption vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
Versions prior to X.Org libXfont 1.4.8 and 1.4.99.901 are vulnerable.
X.Org libXfont is prone to multiple integer-overflow and memory-corruption vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
Versions prior to X.Org libXfont 1.4.8 and 1.4.99.901 are vulnerable.
Exploit / POC
X.Org libXfont Multiple Integer Overflow and Memory Corruption Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
X.Org libXfont Multiple Integer Overflow and Memory Corruption Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
X.Org libXfont Multiple Integer Overflow and Memory Corruption Vulnerabilities
References:
References: