CVE-2007-4568
- State
- Published
- Severity
- Not scored
- Published
- Oct 5, 2007
- Updated
- Aug 7, 2024
- Reserved
- Aug 28, 2007
Description
Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- SUSE-SA:2007:054vendor-advisory
- 1018763vdb-entry
- 28542third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307430
- 200642vendor-advisory
- 28891third-party-advisory
- FEDORA-2007-4263vendor-advisory
- 20071003 rPSA-2007-0205-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfsmailing-list
- 27052third-party-advisory
- 20071002 Multiple Vendor X Font Server Multiple Vulnerabilitiesthird-party-advisory
- ADV-2008-0495vdb-entry
- 27060third-party-advisory
- ADV-2008-0924vdb-entry
- [xorg-announce] 20071002 [ANNOUNCE] X.Org security advisory: multiple vulnerabilities in X font servermailing-list
- RHSA-2008:0029vendor-advisory
- xfs-protocol-requests-bo(36919)vdb-entry
- 28004third-party-advisory
- 27240third-party-advisory
- 27168third-party-advisory
- https://issues.rpath.com/browse/RPL-1756
- 29420third-party-advisory
- 27040third-party-advisory
- APPLE-SA-2008-03-18vendor-advisory
- 27176third-party-advisory
- DSA-1385vendor-advisory
- GLSA-200710-11vendor-advisory
- 27228third-party-advisory
- ADV-2007-3467vdb-entry
- RHSA-2008:0030vendor-advisory
- 103114vendor-advisory
- MDKSA-2007:210vendor-advisory
- 25898vdb-entry
- http://bugs.gentoo.org/show_bug.cgi?id=194606
- TA08-043Bthird-party-advisory
- ADV-2007-3338vdb-entry
- 27560third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307562
- APPLE-SA-2008-02-11vendor-advisory
- oval:org.mitre.oval:def:10882vdb-entrysignature
- ADV-2007-3337vdb-entry
- 28536third-party-advisory
- http://bugs.freedesktop.org/show_bug.cgi?id=12298
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.