CVE-2007-1352
No CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days.
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mandrakesoft:mandrake_multi_network_firewall
- openbsd:openbsd
- redhat:enterprise_linux
- redhat:enterprise_linux_desktop
- redhat:fedora_core
- redhat:linux
- redhat:linux_advanced_workstation
- rpath:linux
- slackware:slackware_linux
- turbolinux:turbolinux_desktop
- ubuntu:ubuntu_linux
- x.org:libxfont
References
- http://issues.foresightlinux.org/browse/FL-223
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=502
- http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
- http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html