CVE-2008-0006

Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table.
Severity
UNKNOWN
AV:N/AC:L/Au:N/C:P/I:P/A:P
Atk. Vector
NETWORK
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
VendorProductVersion
sunsolaris_libfont
*
sunsolaris_libxfont
*
x.orgxserver
𝑥
≤ 1.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libxfont
bullseye
1:2.0.4-1
fixed
sid
1:2.0.6-1
fixed
trixie
1:2.0.6-1
fixed
bookworm
1:2.0.6-1
fixed
xorg-server
bullseye
2:1.20.11-1+deb11u13
fixed
bullseye (security)
2:1.20.11-1+deb11u14
fixed
bookworm
2:21.1.7-3+deb12u7
fixed
bookworm (security)
2:21.1.7-3+deb12u8
fixed
sid
2:21.1.14-1
fixed
trixie
2:21.1.14-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libxfont
gutsy
Fixed 1:1.3.0-0ubuntu1.1
released
feisty
Fixed 1:1.2.7-1ubuntu1.1
released
edgy
Fixed 1:1.2.0-0ubuntu3.2
released
dapper
Fixed 1:1.0.0-0ubuntu3.4
released
xorg-server
gutsy
Fixed 2:1.3.0.0.dfsg-12ubuntu8.1
released
feisty
Fixed 2:1.2.0-3ubuntu8.1
released
edgy
Fixed 1:1.1.1-0ubuntu12.3
released
dapper
Fixed 1:1.0.2-0ubuntu10.8
released
References