PT-2015-5448 · X.Org Foundation+4 · Libxfont+4
Alan Coopersmith
+2
·
Publicado
2015-03-17
·
Atualizado
2016-12-31
·
CVE-2015-1804
CVSS v2.0
8.5
Alta
| Vetor | AV:N/AC:M/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
libXfont versions prior to 1.4.9
libXfont versions 1.5.x prior to 1.5.1
Description
The issue is related to the
bdfReadCharacters function in bitmap/bdfread.c, which does not properly perform type conversion for metrics values. This allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.Recommendations
For libXfont versions prior to 1.4.9, update to version 1.4.9 or later.
For libXfont versions 1.5.x prior to 1.5.1, update to version 1.5.1 or later.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Red Hat
Suse
Ubuntu
Libxfont