CVE

Id
79081  
CVE No.
CVE-2015-1804  
Status
Candidate  
Description
The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.  
Phase
Assigned (20150217)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
720421 79081 CVE-2015-1804 MISC:http://www.x.org/wiki/Development/Security/Advisory-2015-03-17/  View
720422 79081 CVE-2015-1804 CONFIRM:http://advisories.mageia.org/MGASA-2015-0113.html  View
720423 79081 CVE-2015-1804 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
720424 79081 CVE-2015-1804 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html  View
720425 79081 CVE-2015-1804 DEBIAN:DSA-3194  View
720426 79081 CVE-2015-1804 URL:http://www.debian.org/security/2015/dsa-3194  View
720427 79081 CVE-2015-1804 FEDORA:FEDORA-2015-4230  View
720428 79081 CVE-2015-1804 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152838.html  View
720429 79081 CVE-2015-1804 FEDORA:FEDORA-2015-4199  View
720430 79081 CVE-2015-1804 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152497.html  View
720431 79081 CVE-2015-1804 GENTOO:GLSA-201507-21  View
720432 79081 CVE-2015-1804 URL:https://security.gentoo.org/glsa/201507-21  View
720433 79081 CVE-2015-1804 MANDRIVA:MDVSA-2015:145  View
720434 79081 CVE-2015-1804 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:145  View
720435 79081 CVE-2015-1804 REDHAT:RHSA-2015:1708  View
720436 79081 CVE-2015-1804 URL:http://rhn.redhat.com/errata/RHSA-2015-1708.html  View
720437 79081 CVE-2015-1804 SUSE:openSUSE-SU-2015:0614  View
720438 79081 CVE-2015-1804 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00032.html  View
720439 79081 CVE-2015-1804 SUSE:SUSE-SU-2015:0674  View
720440 79081 CVE-2015-1804 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00002.html  View
720441 79081 CVE-2015-1804 SUSE:SUSE-SU-2015:0702  View
720442 79081 CVE-2015-1804 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00005.html  View
720443 79081 CVE-2015-1804 SUSE:openSUSE-SU-2015:2300  View
720444 79081 CVE-2015-1804 URL:http://lists.opensuse.org/opensuse-updates/2015-12/msg00074.html  View
720445 79081 CVE-2015-1804 UBUNTU:USN-2536-1  View
720446 79081 CVE-2015-1804 URL:http://www.ubuntu.com/usn/USN-2536-1  View
720447 79081 CVE-2015-1804 BID:73279  View
720448 79081 CVE-2015-1804 URL:http://www.securityfocus.com/bid/73279  View
720449 79081 CVE-2015-1804 SECTRACK:1031935  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7099 JVNDB-2015-002419 OpenStack Object Storage におけるオブジェクトの最新バージョンを削除される脆弱性 OpenStack Object Storage (Swift) には、allow_version が設定されている場合、オブジェクトの最新バージョンを削除される脆弱性が存在します。 CVE-2015-1856 79081 5.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002419.html  View