local privilege escalation in xf86/XFree86

XFree86 is an open-source X Window System implementation that acts as a client-server-based API between different hardware components like display, mouse, keyboard and so on. Several buffer overflows were found in the fontfile code that handles a user-supplied “fonts.alias” file. The file is processed with root privileges and therefore a successful exploitation of these bugs leads to local root access.