Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-1351

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.

Published

2007-04-06T01:19:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 8.5 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

6.8

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-189
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System ubuntu ubuntu_linux 5.10 Yes
Operating System ubuntu ubuntu_linux 5.10 Yes
Operating System ubuntu ubuntu_linux 5.10 Yes
Operating System ubuntu ubuntu_linux 5.10 Yes
Operating System ubuntu ubuntu_linux 6.06_lts Yes
Operating System ubuntu ubuntu_linux 6.06_lts Yes
Operating System ubuntu ubuntu_linux 6.06_lts Yes
Operating System ubuntu ubuntu_linux 6.06_lts Yes
Operating System ubuntu ubuntu_linux 6.10 Yes
Operating System ubuntu ubuntu_linux 6.10 Yes
Operating System ubuntu ubuntu_linux 6.10 Yes
Operating System ubuntu ubuntu_linux 6.10 Yes
Application x.org libxfont 1.2.2 Yes
Application xfree86_project x11r6 4.3.0 Yes
Application xfree86_project x11r6 4.3.0.1 Yes
Application xfree86_project x11r6 4.3.0.2 Yes
Operating System rpath rpath_linux 1 Yes
Operating System redhat enterprise_linux 2.1 Yes
Operating System redhat enterprise_linux 2.1 Yes
Operating System redhat enterprise_linux 2.1 Yes
Operating System redhat enterprise_linux 2.1 Yes
Operating System redhat enterprise_linux 2.1 Yes
Operating System redhat enterprise_linux 2.1 Yes
Operating System redhat enterprise_linux 3.0 Yes
Operating System redhat enterprise_linux 3.0 Yes
Operating System redhat enterprise_linux 3.0 Yes
Operating System redhat enterprise_linux 4.0 Yes
Operating System redhat enterprise_linux 4.0 Yes
Operating System redhat enterprise_linux 4.0 Yes
Operating System redhat enterprise_linux 5.0 Yes
Operating System redhat enterprise_linux 5.0 Yes
Operating System redhat enterprise_linux 5.0 Yes
Operating System redhat enterprise_linux_desktop 3.0 Yes
Operating System redhat enterprise_linux_desktop 4.0 Yes
Operating System redhat linux_advanced_workstation 2.1 Yes
Operating System redhat linux_advanced_workstation 2.1 Yes
Operating System openbsd openbsd 3.9 Yes
Operating System openbsd openbsd 4.0 Yes
Operating System mandrakesoft mandrake_linux 2007 No
Operating System mandrakesoft mandrake_linux 2007 No
Operating System mandrakesoft mandrake_linux_corporate_server 3.0 No
Operating System mandrakesoft mandrake_linux_corporate_server 3.0 No
Operating System mandrakesoft mandrake_linux_corporate_server 4.0 No
Operating System mandrakesoft mandrake_linux_corporate_server 4.0 No
Application mandrakesoft mandrake_multi_network_firewall 2.0 Yes
References