CVE-2014-0209

Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local…

published May 15, 2014

CVSS
—
EPSS
0%
Percentile
37.6
In the wild
Unconfirmed
What it is

Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00444 · 37.6th percentile
Published
2014-05-15T14:00Z
EPSS history
Timeline
  • 15 MAY 14:00Z
    Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local…
    cvelistv5