CVE-2014-0209 Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a dir...
MediumCVSS 4.6
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libxfont(Debian:12) | < 1:1.4.7-2 | 1:1.4.7-2 |
| debian/libxfont(Debian:13) | < 1:1.4.7-2 | 1:1.4.7-2 |
| debian/libxfont(Debian:14) | < 1:1.4.7-2 | 1:1.4.7-2 |
| x libxfont | <= 1.4.7 | No fix listed |
| x libxfont | = 1.2.3 | No fix listed |
| x libxfont | = 1.2.4 | No fix listed |
| x libxfont | = 1.2.5 | No fix listed |
| x libxfont | = 1.2.6 | No fix listed |
| x libxfont | = 1.2.7 | No fix listed |
| x libxfont | = 1.2.8 | No fix listed |
| x libxfont | = 1.2.9 | No fix listed |
| x libxfont | = 1.3.0 | No fix listed |
| x libxfont | = 1.3.1 | No fix listed |
| x libxfont | = 1.3.2 | No fix listed |
| x libxfont | = 1.3.3 | No fix listed |
| x libxfont | = 1.3.4 | No fix listed |
| x libxfont | = 1.4.0 | No fix listed |
| x libxfont | = 1.4.1 | No fix listed |
| x libxfont | = 1.4.2 | No fix listed |
| x libxfont | = 1.4.3 | No fix listed |
| x libxfont | = 1.4.4 | No fix listed |
| x libxfont | = 1.4.5 | No fix listed |
| x libxfont | = 1.4.6 | No fix listed |
| x libxfont | = 1.4.99 | No fix listed |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 12.10 | No fix listed |
| Canonical Ubuntu Linux | = 13.10 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
References
- Debian Security Tracker CVE-2014-0209 vendor-advisory
- advisories.mageia.org
- openSUSE-SU-2014:0711 vendor-advisory
- [xorg-announce] 20140513 [ANNOUNCE] X.Org Security Advisory: Multiple issues in libXfont mailing-list vendor-advisory
- RHSA-2014:1893 vendor-advisory
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities mailing-list
- 59154 third-party-advisory
- DSA-2927 vendor-advisory
- MDVSA-2015:145 vendor-advisory
- www.oracle.com
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities mailing-list
- 67382 vdb-entry
- USN-2211-1 vendor-advisory
- www.vmware.com