CVE-2008-0006
CVE-2008-0006
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table.
EPSS 5.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libxfont Debian:12
- Affected ranges
- ECOSYSTEM: < 1:1.3.1-2
Update to 1:1.3.1-2
libxfont Debian:13
- Affected ranges
- ECOSYSTEM: < 1:1.3.1-2
Update to 1:1.3.1-2
libxfont Debian:14
- Affected ranges
- ECOSYSTEM: < 1:1.3.1-2
Update to 1:1.3.1-2
xorg-server Debian:12
- Affected ranges
- ECOSYSTEM: < 2:1.4.1~git20080105-2
Update to 2:1.4.1~git20080105-2
xorg-server Debian:13
- Affected ranges
- ECOSYSTEM: < 2:1.4.1~git20080105-2
Update to 2:1.4.1~git20080105-2
xorg-server Debian:14
- Affected ranges
- ECOSYSTEM: < 2:1.4.1~git20080105-2
Update to 2:1.4.1~git20080105-2
Original sources
- http://secunia.com/advisories/28542
- http://secunia.com/advisories/29139
- http://support.avaya.com/elmodocs2/security/ASA-2008-077.htm
- http://www.securityfocus.com/bid/27336
- http://www.vupen.com/english/advisories/2008/0184
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103192-1
- http://secunia.com/advisories/29622
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00704.html
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00674.html
- http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
- https://bugzilla.redhat.com/show_bug.cgi?id=428044
- http://secunia.com/advisories/28500
- http://secunia.com/advisories/28532
- http://secunia.com/advisories/29707
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:024
- http://secunia.com/advisories/28843
- http://secunia.com/advisories/28540
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01543321
- http://www.securityfocus.com/archive/1/487335/100/0/threaded
- http://secunia.com/advisories/28544
- http://www.vupen.com/english/advisories/2008/0703
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:021
- https://nvd.nist.gov/vuln/detail/CVE-2008-0006