X.Org LibXFont 1.2.1
Approved changes feed: RSS · Atom
cpe:2.3:a:x:libxfont:1.2.1:*:*:*:*:*:*:*
part: a version: 1.2.1 update: *
| Vendor | X (a2acdb6f-4f26-543b-8294-d5d6397c9211) |
|---|---|
| Product | Libxfont (67462931-b5b2-55f6-9260-18cb2182eec6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libxfont |
purl2cpe | 2026-06-01 10:12:31.286515 |
pkg:deb/ubuntu/libxfont |
purl2cpe | 2026-06-01 10:12:31.286517 |
pkg:github/freedesktop/libxfont |
purl2cpe | 2026-06-01 10:12:31.286518 |
pkg:github/freedesktop/xorg-libxfont |
purl2cpe | 2026-06-01 10:12:31.286519 |
pkg:github/val-verde/libxfont |
purl2cpe | 2026-06-01 10:12:31.286521 |
pkg:rpm/centos/libxfont |
purl2cpe | 2026-06-01 10:12:31.286522 |
pkg:rpm/fedora/libxfont |
purl2cpe | 2026-06-01 10:12:31.286523 |
pkg:rpm/opensuse/libxfont |
purl2cpe | 2026-06-01 10:12:31.286525 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-6462 |
vulnerable | 2026-06-03 14:33:26.488986 |
Details available
Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.
Published: 2014-01-09T15:00:00.000Z
Updated: 2024-08-06T17:39:01.320Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2895 |
vulnerable | 2026-06-03 14:31:11.042267 |
Details available
The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.
Published: 2011-08-19T17:00:00.000Z
Updated: 2024-08-06T23:15:31.486Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.