CVE-2007-1351

Published: Apr 6, 2007Modified: Apr 23, 2026

8.5

Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 6.8 / Impact: 10.0

Source: NVD

Description

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.

Affected (39)

Products: Ubuntu: Ubuntu Linux · X.org: Libxfont · Xfree86 Project: X11r6 · +4 more

Show all products

Ubuntu: Ubuntu Linux · X.org: Libxfont · Xfree86 Project: X11r6 · Rpath: Rpath Linux · Redhat: Enterprise Linux, Enterprise Linux Desktop, Linux Advanced Workstation · Openbsd: Openbsd · Mandrakesoft: Mandrake Multi Network Firewall

1 product

1 product

1 product

1 product

3 products

Enterprise Linux Desktop

Linux Advanced Workstation

Openbsd

1 product

Openbsd

Mandrakesoft

1 product

Mandrake Multi Network Firewall

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Ubuntu Ubuntu Linux	Version 5.10
Ubuntu Ubuntu Linux	Version 5.10
Ubuntu Ubuntu Linux	Version 5.10
Ubuntu Ubuntu Linux	Version 5.10
Ubuntu Ubuntu Linux	Version 6.06_lts
Ubuntu Ubuntu Linux	Version 6.06_lts
Ubuntu Ubuntu Linux	Version 6.06_lts
Ubuntu Ubuntu Linux	Version 6.06_lts
Ubuntu Ubuntu Linux	Version 6.10
Ubuntu Ubuntu Linux	Version 6.10
Ubuntu Ubuntu Linux	Version 6.10
Ubuntu Ubuntu Linux	Version 6.10

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
X.org Libxfont	Version 1.2.2
Xfree86 Project X11r6	Version 4.3.0.1
Xfree86 Project X11r6	Version 4.3.0.2
Xfree86 Project X11r6	Version 4.3.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Rpath Rpath Linux	Version 1

Configuration D

19 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux	Version 5.0
Redhat Enterprise Linux Desktop	Version 3.0
Redhat Enterprise Linux Desktop	Version 4.0
Redhat Linux Advanced Workstation	Version 2.1
Redhat Linux Advanced Workstation	Version 2.1

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openbsd	Version 3.9
Openbsd Openbsd	Version 4.0

Configuration F

1 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Mandrakesoft Mandrake Multi Network Firewall	Version 2.0

Running on/with	Platform Versions
Mandrakesoft Mandrake Linux	Version 2007
Mandrakesoft Mandrake Linux	Version 2007
Mandrakesoft Mandrake Linux Corporate Server	Version 3.0
Mandrakesoft Mandrake Linux Corporate Server	Version 3.0
Mandrakesoft Mandrake Linux Corporate Server	Version 4.0
Mandrakesoft Mandrake Linux Corporate Server	Version 4.0

Related CWEs

CWE-189

References (136)

http://issues.foresightlinux.org/browse/FL-223

Source: secalert@redhat.com

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501

Source: secalert@redhat.com

Patch

http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Source: secalert@redhat.com

http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2007-0125.html

Source: secalert@redhat.com

http://secunia.com/advisories/24741

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24745

Source: secalert@redhat.com

http://secunia.com/advisories/24756

Source: secalert@redhat.com

http://secunia.com/advisories/24758

Source: secalert@redhat.com

http://secunia.com/advisories/24765

Source: secalert@redhat.com

http://secunia.com/advisories/24768

Source: secalert@redhat.com

http://secunia.com/advisories/24770

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24771

Source: secalert@redhat.com

http://secunia.com/advisories/24772

Source: secalert@redhat.com

http://secunia.com/advisories/24776

Source: secalert@redhat.com

http://secunia.com/advisories/24791

Source: secalert@redhat.com

http://secunia.com/advisories/24885

Source: secalert@redhat.com

http://secunia.com/advisories/24889

Source: secalert@redhat.com

http://secunia.com/advisories/24921

Source: secalert@redhat.com

http://secunia.com/advisories/24996

Source: secalert@redhat.com

http://secunia.com/advisories/25004

Source: secalert@redhat.com

http://secunia.com/advisories/25006

Source: secalert@redhat.com

http://secunia.com/advisories/25096

Source: secalert@redhat.com

http://secunia.com/advisories/25195

Source: secalert@redhat.com

http://secunia.com/advisories/25216

Source: secalert@redhat.com

http://secunia.com/advisories/25305

Source: secalert@redhat.com

http://secunia.com/advisories/25495

Source: secalert@redhat.com

http://secunia.com/advisories/28333

Source: secalert@redhat.com

http://secunia.com/advisories/30161

Source: secalert@redhat.com

http://secunia.com/advisories/33937

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200705-02.xml

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200705-10.xml

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733

Source: secalert@redhat.com

http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=498954

Source: secalert@redhat.com

http://sourceforge.net/project/shownotes.php?release_id=498954

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1

Source: secalert@redhat.com

http://support.apple.com/kb/HT3438

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2007-193.htm

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1294

Source: secalert@redhat.com

http://www.debian.org/security/2008/dsa-1454

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:079

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:080

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:081

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_27_x.html

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_6_sr.html

Source: secalert@redhat.com

http://www.openbsd.org/errata39.html#021_xorg

Source: secalert@redhat.com

http://www.openbsd.org/errata40.html#011_xorg

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0126.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0132.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0150.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/464686/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/464816/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/23283

Source: secalert@redhat.com

Patch

http://www.securityfocus.com/bid/23300

Source: secalert@redhat.com

http://www.securityfocus.com/bid/23402

Source: secalert@redhat.com

http://www.securitytracker.com/id?1017857

Source: secalert@redhat.com

http://www.trustix.org/errata/2007/0013/

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-448-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1217

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1264

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1548

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/33417

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1213

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810

Source: secalert@redhat.com

http://issues.foresightlinux.org/browse/FL-223