Unscored severity · published Oct 5, 2007
CVE-2007-4990
The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents…
–
CVSS
10.7%
EPSS
No
On KEV
Description
The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.7% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XF
X Font Server · X.org
through 1.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4990
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4990
bugs.freedesktop.org
http://bugs.freedesktop.org/show_bug.cgi?id=12299
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=194606
docs.info.apple.com
http://docs.info.apple.com/article.html?artnum=307562
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01323725
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602
lists.apple.com
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
More from X Font Server
–
CVE-2007-4568
Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2)…