Unscored severity · published Apr 6, 2007
CVE-2007-1351
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to…
–
CVSS
5.6%
EPSS
No
On KEV
Description
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.6% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
2.1; 2.1; 2.1; 2.1; 2.1; 2.1; +9 more · source: NVD
EL
Enterprise Linux Desktop · Redhat
3.0; 4.0 · source: NVD
LI
Libxfont · X.org
1.2.2 · source: NVD
LA
Linux Advanced Workstation · Redhat
2.1; 2.1 · source: NVD
MM
Mandrake Multi Network Firewall · Mandrakesoft
2.0 · source: NVD
OP
Openbsd · Openbsd
3.9; 4.0 · source: NVD
RL
Rpath Linux · Rpath
1 · source: NVD
UL
Ubuntu Linux · Ubuntu
5.10; 5.10; 5.10; 5.10; 6.06_lts; 6.06_lts; +6 more · source: NVD
X1
X11r6 · Xfree86 Project
4.3.0; 4.3.0.1; 4.3.0.2 · source: NVD
Affected product
MM
Mandrake Multi Network Firewall
Mandrakesoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1351
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1351
issues.foresightlinux.org
http://issues.foresightlinux.org/browse/FL-223
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501
lists.apple.com
http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html
lists.apple.com
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
lists.freedesktop.org
http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2007-0125.html
More from Mandrake Multi Network Firewall
–
CVE-2007-5116
Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by…
–
CVE-2007-1352
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the…
–
CVE-2005-0003
The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows…
–
CVE-2004-1235
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute…
–
CVE-2004-1051
sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within…