Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks.
2003-10-20T04:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | xfree86_project | x11r6 | 4.2.1 | Yes |
Application | xfree86_project | x11r6 | 4.3.0 | Yes |
Operating System | netbsd | netbsd | 1.5 | Yes |
Operating System | netbsd | netbsd | 1.5.1 | Yes |
Operating System | netbsd | netbsd | 1.5.2 | Yes |
Operating System | netbsd | netbsd | 1.5.3 | Yes |
Operating System | netbsd | netbsd | 1.6 | Yes |
Operating System | netbsd | netbsd | 1.6.1 | Yes |