Lucene search
RedHatRHSA-2007:0132HistoryApr 03, 2007 - 12:00 a.m.
(RHSA-2007:0132) Important: libXfont security update
2007-04-0300:00:00
access.redhat.com
12
0.05 Low
EPSS
Percentile
92.9%
X.org is an open source implementation of the X Window System. It provides
the basic low-level functionality that full-fledged graphical user
interfaces are designed upon.
iDefense reported two integer overflows in the way X.org handled various
font files. A malicious local user could exploit these issues to
potentially execute arbitrary code with the privileges of the X.org server.
(CVE-2007-1351, CVE-2007-1352)
Users of X.org libXfont should upgrade to these updated packages, which
contain a backported patch and are not vulnerable to this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 5 | x86_64 | libxfont-devel | < 1.2.2-1.0.2.el5 | libXfont-devel-1.2.2-1.0.2.el5.x86_64.rpm |
| RedHat | 5 | ppc64 | libxfont-devel | < 1.2.2-1.0.2.el5 | libXfont-devel-1.2.2-1.0.2.el5.ppc64.rpm |
| RedHat | 5 | s390x | libxfont-devel | < 1.2.2-1.0.2.el5 | libXfont-devel-1.2.2-1.0.2.el5.s390x.rpm |
| RedHat | 5 | src | libxfont | < 1.2.2-1.0.2.el5 | libXfont-1.2.2-1.0.2.el5.src.rpm |
| RedHat | 5 | x86_64 | libxfont | < 1.2.2-1.0.2.el5 | libXfont-1.2.2-1.0.2.el5.x86_64.rpm |
| RedHat | 5 | ia64 | libxfont | < 1.2.2-1.0.2.el5 | libXfont-1.2.2-1.0.2.el5.ia64.rpm |
| RedHat | 5 | s390 | libxfont-devel | < 1.2.2-1.0.2.el5 | libXfont-devel-1.2.2-1.0.2.el5.s390.rpm |
| RedHat | 5 | s390 | libxfont | < 1.2.2-1.0.2.el5 | libXfont-1.2.2-1.0.2.el5.s390.rpm |
| RedHat | 5 | ia64 | libxfont-devel | < 1.2.2-1.0.2.el5 | libXfont-devel-1.2.2-1.0.2.el5.ia64.rpm |
| RedHat | 5 | ppc64 | libxfont | < 1.2.2-1.0.2.el5 | libXfont-1.2.2-1.0.2.el5.ppc64.rpm |
Related
nessus
nessus
RHEL 5 : libXfont (RHSA-2007:0132)
2007-05-25 00:00:00
Oracle Linux 5 : libXfont (ELSA-2007-0132)
2013-07-12 00:00:00
GLSA-200705-10 : LibXfont, TightVNC: Multiple vulnerabilities
2007-05-10 00:00:00
gentoo
gentoo
LibXfont, TightVNC: Multiple vulnerabilities
2007-05-08 00:00:00
FreeType: User-assisted execution of arbitrary code
2007-05-01 00:00:00
openvas
openvas
Mandriva Update for tightvnc MDKSA-2007:080 (tightvnc)
2009-04-09 00:00:00
Gentoo Security Advisory GLSA 200705-10 (tightvnc, libxfont)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200705-10 (tightvnc, libxfont)
2008-09-24 00:00:00
oraclelinux
oraclelinux
Important: libXfont security update
2007-06-26 00:00:00
Important: xorg-x11 security update
2007-04-04 00:00:00
Important: XFree86 security update
2007-04-04 00:00:00
ubuntu
ubuntu
X.org vulnerabilities
2007-04-03 00:00:00
redhat
redhat
(RHSA-2007:0125) Important: XFree86 security update
2007-04-03 00:00:00
(RHSA-2007:0126) Important: xorg-x11 security update
2007-04-03 00:00:00
(RHSA-2007:0150) Moderate: freetype security update
2007-04-16 00:00:00
osv
osv
xfree86
2007-05-17 00:00:00
freetype - arbitrary code execution
2008-01-07 00:00:00
centos
centos
xorg security update
2007-04-04 00:24:46
XFree86 security update
2007-04-04 05:46:38
XFree86 security update
2007-04-03 22:05:23
securityvulns
securityvulns
debian
debian
[SECURITY] [DSA 1294-1] New xfree86 packages fix several vulnerabilities
2007-05-17 21:22:02
[SECURITY] [DSA 1454-1] New freetype packages fix arbitrary code execution
2008-01-07 19:48:32
suse
suse
local privilege escalation in XFree86, Xorg
2007-04-20 16:38:35
prion
prion
Integer overflow
2007-04-06 01:19:00
Integer overflow
2007-04-06 01:19:00
Design/Logic Flaw
2007-06-26 18:30:00
cvelist
cvelist
cve
cve
nvd
nvd
slackware
slackware
[slackware-security] freetype
2007-04-20 02:55:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:15:13
ubuntucve
ubuntucve
debiancve
debiancve
vmware
vmware