Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0084
HistoryMar 03, 2004 - 5:00 a.m.

CVE-2004-0084

2004-03-0305:00:00
[email protected]
web.nvd.nist.gov
1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.121 Low

EPSS

Percentile

95.4%

JSON

Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.

Affected configurations

NVD
Node
xfree86_projectx11r6Match4.1.0
OR
xfree86_projectx11r6Match4.1.11
OR
xfree86_projectx11r6Match4.1.12
OR
xfree86_projectx11r6Match4.2.0
OR
xfree86_projectx11r6Match4.2.1
OR
xfree86_projectx11r6Match4.2.1errata
OR
xfree86_projectx11r6Match4.3.0
Node
openbsdopenbsdMatch3.3
OR
openbsdopenbsdMatch3.4

References

Related

redhat 2
ubuntucve 3
nvd 2
slackware 1
openvas 12
cvelist 3
nessus 11
securityvulns 3
cve 3
freebsd 2
suse 1
osv 1
debian 1
cert 2
gentoo 1
redhat
redhat
(RHSA-2004:060) XFree86 security update
2004-02-13 00:00:00
(RHSA-2004:061) XFree86 security update
2004-02-16 00:00:00
ubuntucve
ubuntucve
CVE-2004-0106
2004-03-03 00:00:00
CVE-2004-0083
2004-03-03 00:00:00
CVE-2004-0084
2004-03-03 00:00:00
nvd
nvd
CVE-2004-0106
2004-03-03 05:00:00
CVE-2004-0083
2004-03-03 05:00:00
slackware
slackware
XFree86 security update
2004-02-12 12:19:25
openvas
openvas
HP-UX Update for XFree86 HPSBUX01018
2009-05-05 00:00:00
FreeBSD Ports: XFree86-Server
2008-09-04 00:00:00
Slackware: Security Advisory (SSA:2004-043-02)
2012-09-10 00:00:00
cvelist
cvelist
CVE-2004-0084
2004-02-14 05:00:00
CVE-2004-0106
2004-02-16 05:00:00
CVE-2004-0083
2004-02-14 05:00:00
nessus
nessus
RHEL 3 : XFree86 (RHSA-2004:061)
2004-07-06 00:00:00
SuSE-SA:2004:006: xf86/XFree86
2004-07-25 00:00:00
RHEL 2.1 : XFree86 (RHSA-2004:060)
2004-07-06 00:00:00
securityvulns
securityvulns
UnixWare 7.1.3 Open UNIX 8.0.0 : Xsco contains a buffer overflow that could be exploited to gain root privileges.
2004-08-02 00:00:00
OpenServer 5.0.6 OpenServer 5.0.7 : Xsco contains a buffer overflow that could be exploited to gain root privileges.
2004-08-02 00:00:00
iDEFENSESecurityAdvisory02.10.04: XFree86FontInformationFileBufferOverflow
2004-02-11 00:00:00
cve
cve
CVE-2004-0083
2004-03-03 05:00:00
CVE-2004-0106
2004-03-03 05:00:00
CVE-2004-0084
2004-03-03 05:00:00
freebsd
freebsd
Buffer overflows in XFree86 servers
2004-02-10 00:00:00
linux_base -- vulnerabilities in Red Hat 7.1 libraries
2004-09-27 00:00:00
suse
suse
local privilege escalation in xf86/XFree86
2004-02-23 16:37:48
osv
osv
xfree86 - several vulnerabilities
2004-02-19 00:00:00
debian
debian
[SECURITY] [DSA 443-1] New xfree86 packages fix multiple vulnerabilities
2004-02-20 06:58:37
cert
cert
XFree86 vulnerable to buffer overflow via crafted font directory in 'fonts.alias' file
2004-12-07 00:00:00
XFree86 vulnerable to buffer overflow via error in 'ReadFontAlias()' function
2004-12-07 00:00:00
gentoo
gentoo
XFree86 Font Information File Buffer Overflow
2004-02-11 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.121 Low

EPSS

Percentile

95.4%

JSON
Related for NVD:CVE-2004-0084
redhat2ubuntucve3nvd2slackware1openvas12cvelist3nessus11securityvulns3cve3freebsd2suse1osv1debian1cert2gentoo1