CVE-2013-6462
At a glance Severity Not available EPSS EPSS 10.25 % · percentile 96 (2026-10-27) State PUBLISHED Published 2014-01-09 Updated 2024-08-06 Assigner redhat NVD status Modified Description Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.
Scores Version Score Vector Scored by CVSS 2.0 HIGH 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:x:libxfont:1.1.0:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.0:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.1:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.2:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.3:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.4:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.5:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.6:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.7:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.8:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.9:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.0:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.1:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.2:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.3:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.4:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.0:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.1:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.2:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.3:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.4:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.5:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.6:*:*:*:*:*:*:*Affected products Product Versions affected n/a
References
Sources
