CVE-2003-0581

X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a (1)…

published July 25, 2003

CVSS
—
EPSS
2%
Percentile
84.6
In the wild
Unconfirmed
What it is

X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a (1) FS_QueryXExtents8 or (2) FS_QueryXBitmaps8 packet, and possibly other types of packets, with a large num_ranges value, which causes an out-of-bounds array access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02496 · 84.6th percentile
Published
2003-07-25T04:00Z
EPSS history
Timeline
  • 25 JUL 04:00Z
    X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a (1)…
    cvelistv5