CVE-2007-4568

Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1)…

published October 5, 2007

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03975 · 90.4th percentile
Published
2007-10-05T21:00Z
EPSS history
Timeline
  • 05 OCT 21:00Z
    Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1)…
    cvelistv5