CVE-2013-6462
Fixed in a distro release EPSS 10%
Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.
Products: libxfont
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libxfont | 1:1.4.7-1 |
| Debian 13 | libxfont | 1:1.4.7-1 |
| Debian 14 | libxfont | 1:1.4.7-1 |
| Debian 6.0 | libxfont | 1:1.4.1-4 |
| Debian 7 | libxfont | 1:1.4.5-3 |
| Red Hat Enterprise Linux 5 | libXfont | 0:1.2.2-1.0.5.el5_10 |
| Red Hat Enterprise Linux 5 | libXfont-debuginfo | 0:1.2.2-1.0.5.el5_10 |
| Red Hat Enterprise Linux 5 | libXfont-devel | 0:1.2.2-1.0.5.el5_10 |
| Red Hat Enterprise Linux 6 | libXfont | 0:1.4.5-3.el6_5 |
| Red Hat Enterprise Linux 6 | libXfont-debuginfo | 0:1.4.5-3.el6_5 |
| Red Hat Enterprise Linux 6 | libXfont-devel | 0:1.4.5-3.el6_5 |