CVE-2004-0084 Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malfor...
HighCVSS 10.0
EPSS 24.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xfree86 project x11r6 | = 4.1.0 | No fix listed |
| xfree86 project x11r6 | = 4.1.11 | No fix listed |
| xfree86 project x11r6 | = 4.1.12 | No fix listed |
| xfree86 project x11r6 | = 4.2.0 | No fix listed |
| xfree86 project x11r6 | = 4.2.1 | No fix listed |
| xfree86 project x11r6 | = 4.3.0 | No fix listed |
| OpenBSD | = 3.3 | No fix listed |
| OpenBSD | = 3.4 | No fix listed |
References
- CLA-2004:821 vendor-advisory
- 20040212 iDEFENSE Security Advisory 02.11.04: XFree86 Font Information File Buffer Overflow II mailing-list
- FLSA:2314 vendor-advisory
- 57768 vendor-advisory
- DSA-443 vendor-advisory
- www.idefense.com
- VU#667502 third-party-advisory us-government-resource
- MDKSA-2004:012 vendor-advisory
- SuSE-SA:2004:006 vendor-advisory
- RHSA-2004:059 vendor-advisory
- RHSA-2004:060 patch vendor-advisory
- RHSA-2004:061 patch vendor-advisory
- 9652 exploit patch vdb-entry vendor-advisory
- SSA:2004-043 vendor-advisory
- xfree86-copyisolatin1lLowered-bo(15200) vdb-entry
- oval:org.mitre.oval:def:10405 signature vdb-entry
- oval:org.mitre.oval:def:807 signature vdb-entry
- oval:org.mitre.oval:def:831 signature vdb-entry