|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200609-04] LibXfont: Multiple integer overflows Vulnerability Scan
Vulnerability Scan Summary
LibXfont: Multiple integer overflows
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200609-04
(LibXfont: Multiple integer overflows)
Several integer overflows have been found in the PCF font parser.
Impact
A local attacker could possibly execute arbitrary code or crash the
Xserver by enticing a user to load a specially crafted PCF font file.
Workaround
Do not use untrusted PCF Font files.
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3467
Solution:
All libXfont users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=x11-libs/libXfont-1.2.0-r1"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
