NVD

Id
62408  
Name
CVE-2006-3740  
Description
Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-09-12  
Modified Date
2011-03-07  
Seq
2006-3740  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
323720 62408 CVE-2006-3740 oval:org.mitre.oval:def:9454  View
323721 62408 CVE-2006-3740 GLSA-200609-07  View
323722 62408 CVE-2006-3740 1016828  View
323723 62408 CVE-2006-3740 102780  View
323724 62408 CVE-2006-3740 http://support.avaya.com/elmodocs2/security/ASA-2006-190.htm  View
323725 62408 CVE-2006-3740 http://support.avaya.com/elmodocs2/security/ASA-2006-191.htm  View
323726 62408 CVE-2006-3740 DSA-1193  View
323727 62408 CVE-2006-3740 20060912 Multiple Vendor X Server CID-keyed Fonts "scan_cidfont()" Integer Overflow Vulnerability  View
323728 62408 CVE-2006-3740 MDKSA-2006:164  View
323729 62408 CVE-2006-3740 SUSE-SR:2006:023  View
323730 62408 CVE-2006-3740 RHSA-2006:0665  View
323731 62408 CVE-2006-3740 RHSA-2006:0666  View
323732 62408 CVE-2006-3740 20060912 rPSA-2006-0167-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs  View
323733 62408 CVE-2006-3740 20070330 VMSA-2007-0002 VMware ESX security updates  View
323734 62408 CVE-2006-3740 19974  View
323735 62408 CVE-2006-3740 USN-344-1  View
323736 62408 CVE-2006-3740 http://www.vmware.com/support/esx25/doc/esx-254-200702-patch.html  View
323737 62408 CVE-2006-3740 ADV-2006-3581  View
323738 62408 CVE-2006-3740 ADV-2006-3582  View
323739 62408 CVE-2006-3740 ADV-2007-0322  View
323740 62408 CVE-2006-3740 ADV-2007-1171  View
323741 62408 CVE-2006-3740 xorg-server-scancidfont-overflow(28890)  View
323742 62408 CVE-2006-3740 https://issues.rpath.com/browse/RPL-614  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58351 JVNDB-2006-000547 XFree86 および X.Org の scan_cidfont() 関数における整数オーバーフローの脆弱性 CID フォントは、マルチバイトに対応した PostScript フォントの一種であり、"拡張 Type 1フォント" とも呼ばれています。 CVE-2006-3740 19842 CVE-2006-3740 62408 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000547.html 2006-09-12 2007-04-01 View