CVE-2014-0210
En bref Sévérité Non disponible EPSS EPSS 4.58 % · centile 92 (2026-10-27) État PUBLISHED Publiée 2014-05-15 Mise à jour 2024-08-06 Attribuée par redhat Statut NVD Modified Description Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the (1) _fs_recv_conn_setup, (2) fs_read_open_font, (3) fs_read_query_info, (4) fs_read_extent_info, (5) fs_read_glyphs, (6) fs_read_list, or (7) fs_read_list_info function.
Scores Version Score Vecteur Évalué par CVSS 2.0 HIGH 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:x:libxfont:*:*:*:*:*:*:*:* ≤ 1.4.7cpe:2.3:a:x:libxfont:1.2.3:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.4:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.5:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.6:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.7:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.8:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.9:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.0:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.1:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.2:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.3:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.4:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.0:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.1:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.2:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.3:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.4:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.5:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.6:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.99:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*Produits affectés Produit Versions affected n/a
Références
Sources
