CVE-2007-1352

Published: Apr 6, 2007Modified: Apr 23, 2026

3.8

Vector

AV:A/AC:M/Au:S/C:N/I:P/A:P

Exploitability: 4.4 / Impact: 4.9

Source: NVD

Description

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.

Affected (44)

Products: Mandrakesoft: Mandrake Multi Network Firewall · X.org: Libxfont · Redhat: Enterprise Linux, Enterprise Linux Desktop, Fedora Core, Linux, Linux Advanced Workstation · +5 more

Show all products

Mandrakesoft

1 product

Mandrake Multi Network Firewall

1 product

5 products

Enterprise Linux Desktop

Fedora Core

Linux

Linux Advanced Workstation

1 product

1 product

1 product

1 product

1 product

Configuration A

1 vulnerable · 12 platform

Vulnerable Software	Affected Versions
Mandrakesoft Mandrake Multi Network Firewall	Version 2.0

Running on/with	Platform Versions
Mandrakesoft Mandrake Linux	Version 10.0
Mandrakesoft Mandrake Linux	Version 10.0
Mandrakesoft Mandrake Linux	Version 2007
Mandrakesoft Mandrake Linux	Version 2007
Mandrakesoft Mandrake Linux	Version 9.1
Mandrakesoft Mandrake Linux	Version 9.1
Mandrakesoft Mandrake Linux	Version 9.2
Mandrakesoft Mandrake Linux	Version 9.2
Mandrakesoft Mandrake Linux Corporate Server	Version 3.0
Mandrakesoft Mandrake Linux Corporate Server	Version 3.0
Mandrakesoft Mandrake Linux Corporate Server	Version 4.0
Mandrakesoft Mandrake Linux Corporate Server	Version 4.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
X.org Libxfont	Version 1.2.2

Configuration C

20 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 2.1
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux	Version 4.0
Redhat Enterprise Linux Desktop	Version 3.0
Redhat Enterprise Linux Desktop	Version 4.0
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Enterprise Linux Desktop	Version 5.0
Redhat Fedora Core	Version core_1.0
Redhat Linux	Version 9.0
Redhat Linux Advanced Workstation	Version 2.1
Redhat Linux Advanced Workstation	Version 2.1

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Slackware Slackware Linux	Version 9.0
Slackware Slackware Linux	Version 9.1
Slackware Slackware Linux	Version current

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Turbolinux Turbolinux Desktop	Version 10.0

Configuration F

15 vulnerable

Vulnerable Software	Affected Versions
Ubuntu Ubuntu Linux	Version 4.1
Ubuntu Ubuntu Linux	Version 4.1
Ubuntu Ubuntu Linux	Version 4.1
Ubuntu Ubuntu Linux	Version 5.10
Ubuntu Ubuntu Linux	Version 5.10
Ubuntu Ubuntu Linux	Version 5.10
Ubuntu Ubuntu Linux	Version 5.10
Ubuntu Ubuntu Linux	Version 6.06_lts
Ubuntu Ubuntu Linux	Version 6.06_lts
Ubuntu Ubuntu Linux	Version 6.06_lts
Ubuntu Ubuntu Linux	Version 6.06_lts
Ubuntu Ubuntu Linux	Version 6.10
Ubuntu Ubuntu Linux	Version 6.10
Ubuntu Ubuntu Linux	Version 6.10
Ubuntu Ubuntu Linux	Version 6.10

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Rpath Linux	Version 1

Configuration H

2 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openbsd	Version 3.9
Openbsd Openbsd	Version 4.0

References (90)

http://issues.foresightlinux.org/browse/FL-223

Source: secalert@redhat.com

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=502

Source: secalert@redhat.com

http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Source: secalert@redhat.com

http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2007-0125.html

Source: secalert@redhat.com

http://secunia.com/advisories/24741

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/24745

Source: secalert@redhat.com

http://secunia.com/advisories/24756

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/24758

Source: secalert@redhat.com

http://secunia.com/advisories/24765

Source: secalert@redhat.com

http://secunia.com/advisories/24770

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/24771

Source: secalert@redhat.com

http://secunia.com/advisories/24772

Source: secalert@redhat.com

http://secunia.com/advisories/24791

Source: secalert@redhat.com

http://secunia.com/advisories/25004

Source: secalert@redhat.com

http://secunia.com/advisories/25006

Source: secalert@redhat.com

http://secunia.com/advisories/25195

Source: secalert@redhat.com

http://secunia.com/advisories/25216

Source: secalert@redhat.com

http://secunia.com/advisories/25305

Source: secalert@redhat.com

http://secunia.com/advisories/33937

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200705-10.xml

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1

Source: secalert@redhat.com

http://support.apple.com/kb/HT3438

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm

Source: secalert@redhat.com

http://www.debian.org/security/2007/dsa-1294

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:079

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:080

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2007_27_x.html

Source: secalert@redhat.com

http://www.openbsd.org/errata39.html#021_xorg

Source: secalert@redhat.com

http://www.openbsd.org/errata40.html#011_xorg

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2007-0126.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-0132.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/464686/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/464816/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/23283

Source: secalert@redhat.com

http://www.securityfocus.com/bid/23300

Source: secalert@redhat.com

http://www.securitytracker.com/id?1017857

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-448-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1217

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1548

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/33419

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1213

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10523

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13243

Source: secalert@redhat.com

http://issues.foresightlinux.org/browse/FL-223