CVE-2014-0211
At a glance Severity Not available EPSS EPSS 4.36 % · percentile 91 (2026-10-27) State PUBLISHED Published 2014-05-15 Updated 2024-08-06 Assigner redhat NVD status Modified Description Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow.
Scores Version Score Vector Scored by CVSS 2.0 HIGH 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*cpe:2.3:a:x:libxfont:*:*:*:*:*:*:*:* ≤ 1.4.7cpe:2.3:a:x:libxfont:1.2.3:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.4:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.5:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.6:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.7:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.8:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.2.9:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.0:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.1:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.2:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.3:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.3.4:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.0:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.1:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.2:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.3:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.4:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.5:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.6:*:*:*:*:*:*:*cpe:2.3:a:x:libxfont:1.4.99:*:*:*:*:*:*:*Affected products Product Versions affected n/a
References
Sources
