CVE-2007-1351

EPSS 5.59%
Veröffentlicht 06.04.2007 01:19:00
Zuletzt bearbeitet 16.06.2026 22:37:24
Erkennungen
Login

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 71

NVD 39 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ubuntu ≫ Ubuntu Linux Version 5.10 Edition amd64

Ubuntu ≫ Ubuntu Linux Version 5.10 Edition i386

Ubuntu ≫ Ubuntu Linux Version 5.10 Edition powerpc

Ubuntu ≫ Ubuntu Linux Version 5.10 Edition sparc

Ubuntu ≫ Ubuntu Linux Version 6.06_lts Edition amd64

Ubuntu ≫ Ubuntu Linux Version 6.06_lts Edition i386

Ubuntu ≫ Ubuntu Linux Version 6.06_lts Edition powerpc

Ubuntu ≫ Ubuntu Linux Version 6.06_lts Edition sparc

Ubuntu ≫ Ubuntu Linux Version 6.10 Edition amd64

Ubuntu ≫ Ubuntu Linux Version 6.10 Edition i386

Ubuntu ≫ Ubuntu Linux Version 6.10 Edition powerpc

Ubuntu ≫ Ubuntu Linux Version 6.10 Edition sparc

X.Org ≫ Libxfont Version 1.2.2

Xfree86 Project ≫ X11r6 Version 4.3.0

Xfree86 Project ≫ X11r6 Version 4.3.0.1

Xfree86 Project ≫ X11r6 Version 4.3.0.2

Rpath ≫ Rpath Linux Version 1

Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server

Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server_ia64

Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server

Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server_ia64

Redhat ≫ Enterprise Linux Version 2.1 Edition workstation

Redhat ≫ Enterprise Linux Version 2.1 Edition workstation_ia64

Redhat ≫ Enterprise Linux Version 3.0 Edition advanced_servers

Redhat ≫ Enterprise Linux Version 3.0 Edition enterprise_server

Redhat ≫ Enterprise Linux Version 3.0 Edition workstation

Redhat ≫ Enterprise Linux Version 4.0 Edition advanced_server

Redhat ≫ Enterprise Linux Version 4.0 Edition enterprise_server

Redhat ≫ Enterprise Linux Version 4.0 Edition workstation

Redhat ≫ Enterprise Linux Version 5.0 Edition desktop

Redhat ≫ Enterprise Linux Version 5.0 Edition desktop_workstation

Redhat ≫ Enterprise Linux Version 5.0 Edition server

Redhat ≫ Enterprise Linux Desktop Version 3.0

Redhat ≫ Enterprise Linux Desktop Version 4.0

Redhat ≫ Linux Advanced Workstation Version 2.1 Edition ia64

Redhat ≫ Linux Advanced Workstation Version 2.1 Edition itanium

Openbsd ≫ Openbsd Version 3.9

Openbsd ≫ Openbsd Version 4.0

Mandrakesoft ≫ Mandrake Multi Network Firewall Version 2.0

   Mandrakesoft ≫ Mandrake Linux Version 2007
   Mandrakesoft ≫ Mandrake Linux Version 2007 Edition x86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version 3.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version 3.0 Edition x86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version 4.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version 4.0 Edition x86_64

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	5.59%	0.919

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.5	6.8	10	AV:N/AC:M/Au:S/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

http://secunia.com/advisories/33937

http://support.apple.com/kb/HT3438

http://secunia.com/advisories/30161

http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml

http://secunia.com/advisories/24889

http://www.novell.com/linux/security/advisories/2007_6_sr.html

http://issues.foresightlinux.org/browse/FL-223

http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html

http://rhn.redhat.com/errata/RHSA-2007-0125.html

http://secunia.com/advisories/24741

Vendor Advisory

http://secunia.com/advisories/24745

http://secunia.com/advisories/24756

http://secunia.com/advisories/24758

http://secunia.com/advisories/24765

http://secunia.com/advisories/24771

http://secunia.com/advisories/24791

http://secunia.com/advisories/25004

http://secunia.com/advisories/25305

http://www.debian.org/security/2007/dsa-1294

http://www.mandriva.com/security/advisories?name=MDKSA-2007:079

http://www.novell.com/linux/security/advisories/2007_27_x.html

http://www.openbsd.org/errata39.html#021_xorg

http://www.openbsd.org/errata40.html#011_xorg

http://www.redhat.com/support/errata/RHSA-2007-0126.html

http://www.securityfocus.com/archive/1/464686/100/0/threaded

http://www.securityfocus.com/archive/1/464816/100/0/threaded

http://www.securityfocus.com/bid/23300

http://www.vupen.com/english/advisories/2007/1217

https://issues.rpath.com/browse/RPL-1213

http://secunia.com/advisories/24770

Vendor Advisory

http://secunia.com/advisories/24772

http://secunia.com/advisories/25006

http://secunia.com/advisories/25195

http://secunia.com/advisories/25216

http://security.gentoo.org/glsa/glsa-200705-10.xml

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1

http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm

http://www.mandriva.com/security/advisories?name=MDKSA-2007:080

http://www.securitytracker.com/id?1017857

http://www.ubuntu.com/usn/usn-448-1

http://www.vupen.com/english/advisories/2007/1548

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501

Patch

http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html

http://secunia.com/advisories/24768

http://secunia.com/advisories/24776

http://secunia.com/advisories/24885

http://secunia.com/advisories/24921

http://secunia.com/advisories/24996

http://secunia.com/advisories/25096

http://secunia.com/advisories/25495

http://secunia.com/advisories/28333

http://security.gentoo.org/glsa/glsa-200705-02.xml

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733

http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=498954

http://sourceforge.net/project/shownotes.php?release_id=498954

http://support.avaya.com/elmodocs2/security/ASA-2007-193.htm

http://www.debian.org/security/2008/dsa-1454

http://www.mandriva.com/security/advisories?name=MDKSA-2007:081

http://www.redhat.com/support/errata/RHSA-2007-0132.html

http://www.redhat.com/support/errata/RHSA-2007-0150.html

http://www.securityfocus.com/bid/23283

Patch

http://www.securityfocus.com/bid/23402

http://www.trustix.org/errata/2007/0013/

http://www.vupen.com/english/advisories/2007/1264

https://exchange.xforce.ibmcloud.com/vulnerabilities/33417

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810

https://nvd.nist.gov/vuln/detail/CVE-2007-1351

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-1351

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-1351

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-1351