CVE-2013-6462

Priority
Medium
Description
Stack-based buffer overflow in the bdfReadCharacters function in
bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote
attackers to cause a denial of service (crash) or possibly execute
arbitrary code via a long string in a character name in a BDF font file.
References
Assigned-to
mdeslaur
Package
Upstream:needs-triage
Ubuntu 10.04 LTS (Lucid Lynx):released (1:1.4.1-1ubuntu0.2)
Ubuntu 12.04 LTS (Precise Pangolin):released (1:1.4.4-1ubuntu0.1)
Ubuntu 12.10 (Quantal Quetzal):released (1:1.4.5-2ubuntu0.12.10.1)
Ubuntu 13.04 (Raring Ringtail):released (1:1.4.5-2ubuntu0.13.04.1)
Ubuntu 13.10 (Saucy Salamander):released (1:1.4.6-1ubuntu0.1)
Ubuntu 14.04 LTS (Trusty Tahr):released (1:1.4.6-1ubuntu1)
Patches:
Upstream:http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=4d024ac10f964f6bd372ae0dd14f02772a6e5f63
More Information

Valid XHTML 1.0 Strict

Updated: 2014-01-15 18:14:42 UTC (commit 7645)