CVE-2007-1352

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.

🔗 References (90)

• secalert@redhathttp://issues.foresightlinux.org/browse/FL-223
• secalert@redhathttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=502
• secalert@redhathttp://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html
• secalert@redhathttp://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
• secalert@redhathttp://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2007-0125.html
• secalert@redhathttp://secunia.com/advisories/24741
• secalert@redhathttp://secunia.com/advisories/24745
• secalert@redhathttp://secunia.com/advisories/24756
• secalert@redhathttp://secunia.com/advisories/24758
• secalert@redhathttp://secunia.com/advisories/24765
• secalert@redhathttp://secunia.com/advisories/24770
• secalert@redhathttp://secunia.com/advisories/24771
• secalert@redhathttp://secunia.com/advisories/24772
• secalert@redhathttp://secunia.com/advisories/24791