Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403…
Priority LOW 21Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.
Why it matters now
EPSS 0.01535 74th percentileScored 2026-11-07
Fix Fixed Red Hat: 3 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 56
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:* | 9.1 | Running on | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:* | 9.1 | Running on | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:* | 9.2 | Running on | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:* | 9.2 | Running on | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:* | 10.0 | Running on | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:* | 10.0 | Running on | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:* | 2007 | Running on | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:x86_64:*:*:*:*:* | 2007 | Running on | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:* | 3.0 | Running on | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:* | 3.0 | Running on | Mandrakesoft |
- cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:* Versions 9.1 Running on ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:* Versions 9.1 Running on ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:* Versions 9.2 Running on ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:* Versions 9.2 Running on ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Running on ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:* Versions 10.0 Running on ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:*:*:*:*:*:* Versions 2007 Running on ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux:2007:*:x86_64:*:*:*:*:* Versions 2007 Running on ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:* Versions 3.0 Running on ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:* Versions 3.0 Running on ·Mandrakesoft
Show 46 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:* | 4.0 | Running on | Mandrakesoft |
| cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:x86_64:*:*:*:*:* | 4.0 | Running on | Mandrakesoft |
| cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Mandrakesoft |
| cpe:2.3:a:x.org:libxfont:1.2.2:*:*:*:*:*:*:* | 1.2.2 | Vulnerable | x.org |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:client:*:*:*:*:* | 5.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:client_workstation:*:*:*:*:* | 5.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:* | core_1.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Slackware |
| cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:* | 9.1 | Vulnerable | Slackware |
| cpe:2.3:o:slackware:slackware_linux:current:*:*:*:*:*:*:* | current | Vulnerable | Slackware |
| cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Turbolinux |
| cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia32:*:*:*:*:* | 4.1 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:* | 4.1 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:* | 4.1 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:amd64:*:*:*:*:* | 5.10 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:i386:*:*:*:*:* | 5.10 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:powerpc:*:*:*:*:* | 5.10 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:sparc:*:*:*:*:* | 5.10 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:amd64:*:*:*:*:* | 6.06_lts | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:i386:*:*:*:*:* | 6.06_lts | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:powerpc:*:*:*:*:* | 6.06_lts | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:sparc:*:*:*:*:* | 6.06_lts | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:amd64:*:*:*:*:* | 6.10 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:i386:*:*:*:*:* | 6.10 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:powerpc:*:*:*:*:* | 6.10 | Vulnerable | Ubuntu |
| cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:sparc:*:*:*:*:* | 6.10 | Vulnerable | Ubuntu |
| cpe:2.3:o:rpath:linux:1:*:*:*:*:*:*:* | 1 | Vulnerable | Rpath |
| cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:* | 3.9 | Vulnerable | OpenBSD |
| cpe:2.3:o:openbsd:openbsd:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | OpenBSD |
- cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:* Versions 4.0 Running on ·Mandrakesoft
- cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:x86_64:*:*:*:*:* Versions 4.0 Running on ·Mandrakesoft
- cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Mandrakesoft
- cpe:2.3:a:x.org:libxfont:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·x.org
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:client:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:client_workstation:*:*:*:*:* Versions 5.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:* Versions core_1.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Slackware
- cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:* Versions 9.1 Vulnerable ·Slackware
- cpe:2.3:o:slackware:slackware_linux:current:*:*:*:*:*:*:* Versions current Vulnerable ·Slackware
- cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Turbolinux
- cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia32:*:*:*:*:* Versions 4.1 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:* Versions 4.1 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:* Versions 4.1 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:amd64:*:*:*:*:* Versions 5.10 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:i386:*:*:*:*:* Versions 5.10 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:powerpc:*:*:*:*:* Versions 5.10 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:sparc:*:*:*:*:* Versions 5.10 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:amd64:*:*:*:*:* Versions 6.06_lts Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:i386:*:*:*:*:* Versions 6.06_lts Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:powerpc:*:*:*:*:* Versions 6.06_lts Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:sparc:*:*:*:*:* Versions 6.06_lts Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:amd64:*:*:*:*:* Versions 6.10 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:i386:*:*:*:*:* Versions 6.10 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:powerpc:*:*:*:*:* Versions 6.10 Vulnerable ·Ubuntu
- cpe:2.3:o:ubuntu:ubuntu_linux:6.10:*:sparc:*:*:*:*:* Versions 6.10 Vulnerable ·Ubuntu
- cpe:2.3:o:rpath:linux:1:*:*:*:*:*:*:* Versions 1 Vulnerable ·Rpath
- cpe:2.3:o:openbsd:openbsd:3.9:*:*:*:*:*:*:* Versions 3.9 Vulnerable ·OpenBSD
- cpe:2.3:o:openbsd:openbsd:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·OpenBSD
Remediation
Red Hat 3 advisories
- RHSA-2007:0125 Released 2007-04-03 · Red Hat rating ImportantXFree86 security update
- Red Hat Desktop version 3 XFree86-100dpi-fonts-4.3.0-120.EL, XFree86-100dpi-fonts-4.3.0-120.EL.i386, XFree86-4.3.0-120.EL +47
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 XFree86-100dpi-fonts-4.1.0-82.EL.i386, XFree86-100dpi-fonts-4.1.0-82.EL.ia64, XFree86-4.1.0-82.EL +37
- Red Hat Enterprise Linux AS version 3 XFree86-100dpi-fonts-4.3.0-120.EL, XFree86-100dpi-fonts-4.3.0-120.EL.i386, XFree86-100dpi-fonts-4.3.0-120.EL.ia64 +47
- Red Hat Enterprise Linux ES version 2.1 XFree86-100dpi-fonts-4.1.0-82.EL.i386, XFree86-4.1.0-82.EL, XFree86-4.1.0-82.EL.i386 +18
- Red Hat Enterprise Linux ES version 3 XFree86-100dpi-fonts-4.3.0-120.EL, XFree86-100dpi-fonts-4.3.0-120.EL.i386, XFree86-100dpi-fonts-4.3.0-120.EL.ia64 +47
- Red Hat Enterprise Linux WS version 2.1 XFree86-100dpi-fonts-4.1.0-82.EL.i386, XFree86-4.1.0-82.EL, XFree86-4.1.0-82.EL.i386 +18
- Red Hat Enterprise Linux WS version 3 XFree86-100dpi-fonts-4.3.0-120.EL, XFree86-100dpi-fonts-4.3.0-120.EL.i386, XFree86-100dpi-fonts-4.3.0-120.EL.ia64 +47
- Red Hat Linux Advanced Workstation 2.1 XFree86-100dpi-fonts-4.1.0-82.EL.ia64, XFree86-4.1.0-82.EL, XFree86-4.1.0-82.EL.ia64 +17
- RHSA-2007:0126 Released 2007-04-03 · Red Hat rating Importantxorg-x11 security update
- Red Hat Enterprise Linux AS version 4 xorg-x11-6.8.2-1.EL.13.37.7, xorg-x11-6.8.2-1.EL.13.37.7.i386, xorg-x11-6.8.2-1.EL.13.37.7.ia64 +47
- Red Hat Enterprise Linux Desktop version 4 xorg-x11-6.8.2-1.EL.13.37.7, xorg-x11-6.8.2-1.EL.13.37.7.i386, xorg-x11-Mesa-libGL-6.8.2-1.EL.13.37.7 +33
- Red Hat Enterprise Linux ES version 4 xorg-x11-6.8.2-1.EL.13.37.7, xorg-x11-6.8.2-1.EL.13.37.7.i386, xorg-x11-6.8.2-1.EL.13.37.7.ia64 +47
- Red Hat Enterprise Linux WS version 4 xorg-x11-6.8.2-1.EL.13.37.7, xorg-x11-6.8.2-1.EL.13.37.7.i386, xorg-x11-6.8.2-1.EL.13.37.7.ia64 +47
- RHSA-2007:0132 Released 2007-04-03 · Red Hat rating ImportantlibXfont security update
- Red Hat Enterprise Linux (v. 5 server) libXfont-1.2.2-1.0.2.el5, libXfont-1.2.2-1.0.2.el5.i386, libXfont-1.2.2-1.0.2.el5.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libXfont-1.2.2-1.0.2.el5, libXfont-1.2.2-1.0.2.el5.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libXfont-1.2.2-1.0.2.el5, libXfont-devel-1.2.2-1.0.2.el5, libXfont-devel-1.2.2-1.0.2.el5.i386
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Desktop version 3 | Fixed | RHSA-2007:0125 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2007:0132 |
| Red Hat Enterprise Linux AS (Advanced Server) version 2.1 | Fixed | RHSA-2007:0125 |
| Red Hat Enterprise Linux AS version 3 | Fixed | RHSA-2007:0125 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2007:0126 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2007:0132 |
| Red Hat Enterprise Linux Desktop Workstation (v. 5 client) | Fixed | RHSA-2007:0132 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2007:0126 |
| Red Hat Enterprise Linux ES version 2.1 | Fixed | RHSA-2007:0125 |
| Red Hat Enterprise Linux ES version 3 | Fixed | RHSA-2007:0125 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2007:0126 |
| Red Hat Enterprise Linux WS version 2.1 | Fixed | RHSA-2007:0125 |
| Red Hat Enterprise Linux WS version 3 | Fixed | RHSA-2007:0125 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2007:0126 |
| Red Hat Linux Advanced Workstation 2.1 | Fixed | RHSA-2007:0125 |
Timeline
- 2026-10-02 Threatist record created from CVE-2007-1352
- 2026-10-03 Alias added: GHSA-75c4-gh94-3wrw
References
Advisory 15
- 20070403 Multiple Vendor X Server fonts.dir File Parsing Integer Overflow Vulnerability
- RHSA-2007:0126
- GLSA-200705-10
- USN-448-1
- APPLE-SA-2009-02-12
- MDKSA-2007:080
- RHSA-2007:0125
- APPLE-SA-2007-11-14
- SUSE-SA:2007:027
- DSA-1294
- 102886
- [4.0] 011: SECURITY FIX: April 4, 2007
- RHSA-2007:0132
- [3.9] 021: SECURITY FIX: April 4, 2007
- MDKSA-2007:079
Other 9
- oval:org.mitre.oval:def:10523
- http://support.apple.com/kb/HT3438
- oval:org.mitre.oval:def:13243
- http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm
- [xorg-announce] 20070403 various integer overflow vulnerabilites in xserver, libX11 and libXfont
- ADV-2007-1548
- ADV-2007-1217
- https://issues.rpath.com/browse/RPL-1213
- http://issues.foresightlinux.org/browse/FL-223
Sources
- CVE-2007-1352 · CVE Program
- CVE-2007-1352 · NVD
- FIRST EPSS
- GHSA-75c4-gh94-3wrw · GitHub Advisory Database · CC BY 4.0
- CVE-2007-1352 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences