Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-3739
HistorySep 13, 2006 - 12:00 a.m.

CVE-2006-3739

2006-09-1300:00:00
ubuntu.com
ubuntu.com
14

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.001

Percentile

29.0%

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server
allows local users to execute arbitrary code via crafted Adobe Font Metrics
(AFM) files with a modified number of character metrics (StartCharMetrics),
which leads to a heap-based buffer overflow.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchlibxfont< 1.0.0-0ubuntu3.3UNKNOWN
ubuntu6.10noarchlibxfont< 1.2.0-0ubuntu3UNKNOWN

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.001

Percentile

29.0%