CVE-2008-0006

Published: Jan 18, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table.

Affected (3)

Products: Sun: Solaris Libfont, Solaris Libxfont · X.org: Xserver

2 products

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Sun Solaris Libfont	All versions
Sun Solaris Libxfont	All versions
X.org Xserver	Up to 1.4

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (134)

http://bugs.gentoo.org/show_bug.cgi?id=204362

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=307562

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321

Source: secalert@redhat.com

http://jvn.jp/en/jp/JVN88935101/index.html

Source: secalert@redhat.com

http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001043.html

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: secalert@redhat.com

http://lists.freedesktop.org/archives/xorg/2008-January/031918.html

Source: secalert@redhat.com

Patch

http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html

Source: secalert@redhat.com

http://secunia.com/advisories/28273

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28500

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28532

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28535

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28536

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28540

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28542

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28544

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28550

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28571

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28592

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28621

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28718

Source: secalert@redhat.com

http://secunia.com/advisories/28843

Source: secalert@redhat.com

http://secunia.com/advisories/28885

Source: secalert@redhat.com

http://secunia.com/advisories/28941

Source: secalert@redhat.com

http://secunia.com/advisories/29139

Source: secalert@redhat.com

http://secunia.com/advisories/29420

Source: secalert@redhat.com

http://secunia.com/advisories/29622

Source: secalert@redhat.com

http://secunia.com/advisories/29707

Source: secalert@redhat.com

http://secunia.com/advisories/30161

Source: secalert@redhat.com

http://secunia.com/advisories/32545

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200801-09.xml

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200804-05.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1019232

Source: secalert@redhat.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103192-1

Source: secalert@redhat.com

Patch

http://sunsolve.sun.com/search/document.do?assetkey=1-26-201230-1

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2008-038.htm

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2008-077.htm

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/203220

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2008:021

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:022

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:024

Source: secalert@redhat.com

http://www.openbsd.org/errata41.html#012_xorg

Source: secalert@redhat.com

http://www.openbsd.org/errata42.html#006_xorg

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0029.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0030.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0064.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/487335/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/27336

Source: secalert@redhat.com

Patch

http://www.securityfocus.com/bid/27352

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0179

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0184

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0497/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0703

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0924/references

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/3000

Source: secalert@redhat.com

http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile112539&label=AIX%20X%20server%20multiple%20vulnerabilities

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=428044

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/39767

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-2010

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10021

Source: secalert@redhat.com

https://usn.ubuntu.com/571-1/

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00641.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00674.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00771.html

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=204362