NVD

Id
53537  
Name
CVE-2007-1352  
Description
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.  
Reject
 
CVSS Version
2  
CVSS Score
3.8  
Severity
Low  
CVSS Base Score
3.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:N/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-05  
Modified Date
2011-03-07  
Seq
2007-1352  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271193 53537 CVE-2007-1352 http://issues.foresightlinux.org/browse/FL-223  View
271194 53537 CVE-2007-1352 20070403 Multiple Vendor X Server fonts.dir File Parsing Integer Overflow Vulnerability  View
271195 53537 CVE-2007-1352 APPLE-SA-2007-11-14  View
271196 53537 CVE-2007-1352 APPLE-SA-2009-02-12  View
271197 53537 CVE-2007-1352 [xorg-announce] 20070403 various integer overflow vulnerabilites in xserver, libX11 and libXfont  View
271198 53537 CVE-2007-1352 oval:org.mitre.oval:def:10523  View
271199 53537 CVE-2007-1352 oval:org.mitre.oval:def:13243  View
271200 53537 CVE-2007-1352 RHSA-2007:0125  View
271201 53537 CVE-2007-1352 GLSA-200705-10  View
271202 53537 CVE-2007-1352 102886  View
271203 53537 CVE-2007-1352 http://support.apple.com/kb/HT3438  View
271204 53537 CVE-2007-1352 http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm  View
271205 53537 CVE-2007-1352 DSA-1294  View
271206 53537 CVE-2007-1352 MDKSA-2007:079  View
271207 53537 CVE-2007-1352 MDKSA-2007:080  View
271208 53537 CVE-2007-1352 SUSE-SA:2007:027  View
271209 53537 CVE-2007-1352 [3.9] 021: SECURITY FIX: April 4, 2007  View
271210 53537 CVE-2007-1352 [4.0] 011: SECURITY FIX: April 4, 2007  View
271211 53537 CVE-2007-1352 RHSA-2007:0126  View
271212 53537 CVE-2007-1352 RHSA-2007:0132  View
271213 53537 CVE-2007-1352 20070404 rPSA-2007-0065-1 freetype xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs  View
271214 53537 CVE-2007-1352 20070405 FLEA-2007-0009-1: xorg-x11 freetype  View
271215 53537 CVE-2007-1352 23283  View
271216 53537 CVE-2007-1352 23300  View
271217 53537 CVE-2007-1352 1017857  View
271218 53537 CVE-2007-1352 USN-448-1  View
271219 53537 CVE-2007-1352 ADV-2007-1217  View
271220 53537 CVE-2007-1352 ADV-2007-1548  View
271221 53537 CVE-2007-1352 xorg-fontsdir-bo(33419)  View
271222 53537 CVE-2007-1352 https://issues.rpath.com/browse/RPL-1213  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51591 JVNDB-2007-000253 X.Org および XFree86 libfont の FontFileInitTable() 関数における整数オーバーフローの脆弱性 X.Org および XFree86 の libXfont で使用される FontFileInitTable() 関数には、fonts.dir ファイルの一行目に過度に長い文字列を指定した際に、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-1352 24707 CVE-2007-1352 53537 3.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000253.html 2007-04-03 2009-03-12 View