Unscored severity · published Jan 9, 2014
CVE-2013-6462
Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash)…
–
CVSS
10.3%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.3% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libxfont · X
1.1.0; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +17 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-6462
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-6462
Exploit
http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=4d024ac10f964f6bd372ae0dd14f02772a6e5f63
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2014-01/msg00050.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2014-01/msg00052.html
Vendor Advisory
http://lists.x.org/archives/xorg-announce/2014-January/002389.html
osvdb.org
http://osvdb.org/101842
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2014-0018.html
More from Libxfont
9.8
CVE-2007-5199
A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact
8.8
CVE-2026-56003
libXfont2 computeProps Property Buffer Heap Buffer Overflow
8.8
CVE-2026-56002
libXfont2 PCF Font Parsing Heap Buffer Overflow
8.8
CVE-2026-56001
libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
5.5
CVE-2017-16611
In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not read) files on the system as root, triggering tape rewinds, watchdogs, or similar…