NVD

Id
29124  
Name
CVE-2014-0211  
Description
Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-05-15  
Modified Date
2017-01-06  
Seq
2014-0211  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
154161 29124 CVE-2014-0211 http://advisories.mageia.org/MGASA-2014-0278.html  View
154162 29124 CVE-2014-0211 openSUSE-SU-2014:0711  View
154163 29124 CVE-2014-0211 [xorg-announce] 20140513 [ANNOUNCE] X.Org Security Advisory: Multiple issues in libXfont  View
154164 29124 CVE-2014-0211 RHSA-2014:1893  View
154165 29124 CVE-2014-0211 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
154166 29124 CVE-2014-0211 59154  View
154167 29124 CVE-2014-0211 DSA-2927  View
154168 29124 CVE-2014-0211 MDVSA-2015:145  View
154169 29124 CVE-2014-0211 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
154170 29124 CVE-2014-0211 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
154171 29124 CVE-2014-0211 67382  View
154172 29124 CVE-2014-0211 USN-2211-1  View
154173 29124 CVE-2014-0211 http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13639 JVNDB-2014-002514 X.Org libXfont における整数オーバーフローの脆弱性 X.Org libXfont の (1) fs_get_reply、(2) fs_alloc_glyphs、および (3) fs_read_extent_info 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2014-0211 67612 CVE-2014-0211 29124 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002514.html 2014-05-13 2015-06-26 View