PT-2015-5446 · X.Org Foundation+4 · Libxfont+4

Ilja Van Sprundel

·

Publicado

2015-03-17

·

Atualizado

2016-12-22

·

CVE-2015-1802

CVSS v2.0

8.5

Alta

VetorAV:N/AC:M/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions libXfont versions prior to 1.4.9 libXfont versions 1.5.x prior to 1.5.1
Description The issue allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via a negative or large property count in a BDF font file. This is due to a problem in the bdfReadProperties function.
Recommendations For libXfont versions prior to 1.4.9, update to version 1.4.9 or later. For libXfont versions 1.5.x prior to 1.5.1, update to version 1.5.1 or later.

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CESA-2015_1708
CVE-2015-1802
DLA-183-1
DSA-3194-1
MGASA-2015-0113
OPENSUSE-SU-2015_0614-1
OPENSUSE-SU-2024:10299-1
RHSA-2015:1708
RHSA-2015_1708
SUSE-SU-2015:0674-1
SUSE-SU-2015:0702-1
SUSE-SU-2015_0674-1
SUSE-SU-2015_0702-1
USN-2536-1

Produtos afetados

Centos
Red Hat
Suse
Ubuntu
Libxfont