NVD

Id
29122  
Name
CVE-2014-0209  
Description
Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-05-15  
Modified Date
2017-01-06  
Seq
2014-0209  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
154135 29122 CVE-2014-0209 http://advisories.mageia.org/MGASA-2014-0278.html  View
154136 29122 CVE-2014-0209 openSUSE-SU-2014:0711  View
154137 29122 CVE-2014-0209 [xorg-announce] 20140513 [ANNOUNCE] X.Org Security Advisory: Multiple issues in libXfont  View
154138 29122 CVE-2014-0209 RHSA-2014:1893  View
154139 29122 CVE-2014-0209 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
154140 29122 CVE-2014-0209 59154  View
154141 29122 CVE-2014-0209 DSA-2927  View
154142 29122 CVE-2014-0209 MDVSA-2015:145  View
154143 29122 CVE-2014-0209 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
154144 29122 CVE-2014-0209 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
154145 29122 CVE-2014-0209 67382  View
154146 29122 CVE-2014-0209 USN-2211-1  View
154147 29122 CVE-2014-0209 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13637 JVNDB-2014-002512 X.Org libXfont の FontFileAddEntry または lexAlias 関数における整数オーバーフローの脆弱性 X.Org libXfont の (1) FontFileAddEntry または (2) lexAlias 関数には、メタデータに関する処理に不備があるため、整数オーバーフローの脆弱性が存在します。 CVE-2014-0209 67610 CVE-2014-0209 29122 4.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002512.html 2014-05-13 2015-06-26 View