CVE-2004-0083 Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a...
HighCVSS 10.0
EPSS 21.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xfree86 project x11r6 | = 4.1.0 | No fix listed |
| xfree86 project x11r6 | = 4.1.11 | No fix listed |
| xfree86 project x11r6 | = 4.1.12 | No fix listed |
| xfree86 project x11r6 | = 4.2.0 | No fix listed |
| xfree86 project x11r6 | = 4.2.1 | No fix listed |
| xfree86 project x11r6 | = 4.3.0 | No fix listed |
| OpenBSD | = 3.3 | No fix listed |
| OpenBSD | = 3.4 | No fix listed |
References
- CLA-2004:821 vendor-advisory
- 20040210 iDEFENSESecurityAdvisory02.10.04: XFree86FontInformationFileBufferOverflow mailing-list
- 20040211 XFree86 vulnerability exploit mailing-list
- FLSA:2314 vendor-advisory
- GLSA-200402-02 vendor-advisory
- 57768 vendor-advisory
- DSA-443 vendor-advisory
- www.idefense.com
- VU#820006 third-party-advisory us-government-resource
- MDKSA-2004:012 vendor-advisory
- SuSE-SA:2004:006 vendor-advisory
- RHSA-2004:059 vendor-advisory
- RHSA-2004:060 vendor-advisory
- RHSA-2004:061 vendor-advisory
- 9636 exploit patch vdb-entry vendor-advisory
- SSA:2004-043 vendor-advisory
- www.xfree86.org vendor-advisory
- xfree86-fontalias-bo(15130) vdb-entry
- oval:org.mitre.oval:def:806 signature vdb-entry
- oval:org.mitre.oval:def:830 signature vdb-entry
- oval:org.mitre.oval:def:9612 signature vdb-entry