Login Request a demo
Unscored severity · published Sep 13, 2006
CVE-2006-3740
Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XO
X.org · X.org
6.8.2 · source: NVD
XX
Xfree86 X · Xfree86 Project
All versions, or not specified · source: NVD
Affected product
XO
X.org
X.org
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3740
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3740
secunia.com
http://secunia.com/advisories/21864
secunia.com
http://secunia.com/advisories/21889
secunia.com
http://secunia.com/advisories/21890
secunia.com
http://secunia.com/advisories/21894
secunia.com
http://secunia.com/advisories/21900
secunia.com
http://secunia.com/advisories/21904
More from X.org
–
CVE-2010-4818
The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service (server crash) and possibly execute arbitrary code via (1) a crafted…
–
CVE-2006-6101
Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary…
–
CVE-2006-6102
Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code…
–
CVE-2006-6103
Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code…
–
CVE-2006-3739
Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics (AFM) files with a modified…