blob: cae9937b73a8f6d422a08914e33cb1457b94b3f3 [file] [log] [blame]
<?xml version="1.0" encoding="utf-8"?>
<glsa id="200609-04">
<title>LibXfont: Multiple integer overflows</title>
A buffer overflow was discovered in the PCF font parser, potentially
resulting in the execution of arbitrary code.
<product type="ebuild">LibXfont</product>
<announced>September 06, 2006</announced>
<revised>September 06, 2006: 01</revised>
<package name="x11-libs/libXfont" auto="yes" arch="*">
<unaffected range="ge">1.2.0-r1</unaffected>
<vulnerable range="lt">1.2.0-r1</vulnerable>
libXfont is the X.Org Xfont library, some parts are based on the
FreeType code base.
Several integer overflows have been found in the PCF font parser.
<impact type="normal">
A local attacker could possibly execute arbitrary code or crash the
Xserver by enticing a user to load a specially crafted PCF font file.
Do not use untrusted PCF Font files.
All libXfont users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose &quot;&gt;=x11-libs/libXfont-1.2.0-r1&quot;</code>
<uri link="">CVE-2006-3467</uri>
<metadata tag="requester" timestamp="Thu, 31 Aug 2006 17:04:06 +0000">
<metadata tag="submitter" timestamp="Sun, 03 Sep 2006 12:10:42 +0000">
<metadata tag="bugReady" timestamp="Tue, 05 Sep 2006 19:36:43 +0000">