GCVE - cpe:2.3:a:x:libxfont:1.2.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:x:libxfont:1.2.6:*:*:*:*:*:*:*

part: a version: 1.2.6 update: *

Vendor	X (`a2acdb6f-4f26-543b-8294-d5d6397c9211`)
Product	Libxfont (`67462931-b5b2-55f6-9260-18cb2182eec6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/libxfont`	purl2cpe	2026-06-01 10:12:31.286569
`pkg:deb/ubuntu/libxfont`	purl2cpe	2026-06-01 10:12:31.286570
`pkg:github/freedesktop/libxfont`	purl2cpe	2026-06-01 10:12:31.286572
`pkg:github/freedesktop/xorg-libxfont`	purl2cpe	2026-06-01 10:12:31.286573
`pkg:github/val-verde/libxfont`	purl2cpe	2026-06-01 10:12:31.286574
`pkg:rpm/centos/libxfont`	purl2cpe	2026-06-01 10:12:31.286576
`pkg:rpm/fedora/libxfont`	purl2cpe	2026-06-01 10:12:31.286577
`pkg:rpm/opensuse/libxfont`	purl2cpe	2026-06-01 10:12:31.286579

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-0211`	vulnerable	2026-06-03 14:33:37.549357	Details available Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow. Published: 2014-05-15T14:00:00.000Z Updated: 2024-08-06T09:05:39.379Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2014-0012.html http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html http://www.ubuntu.com/usn/USN-2211-1 http://secunia.com/advisories/59154 http://www.securityfocus.com/archive/1/534161/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0210`	vulnerable	2026-06-03 14:33:37.548198	Details available Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the (1) _fs_recv_conn_setup, (2) fs_read_open_font, (3) fs_read_query_info, (4) fs_read_extent_info, (5) fs_read_glyphs, (6) fs_read_list, or (7) fs_read_list_info function. Published: 2014-05-15T14:00:00.000Z Updated: 2024-08-06T09:05:39.283Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2014-0012.html http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html http://www.ubuntu.com/usn/USN-2211-1 http://secunia.com/advisories/59154 http://www.securityfocus.com/archive/1/534161/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0209`	vulnerable	2026-06-03 14:33:37.539019	Details available Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata. Published: 2014-05-15T14:00:00.000Z Updated: 2024-08-06T09:05:39.253Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2014-0012.html http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html http://www.ubuntu.com/usn/USN-2211-1 http://secunia.com/advisories/59154 http://www.securityfocus.com/archive/1/534161/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6462`	vulnerable	2026-06-03 14:33:26.491426	Details available Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file. Published: 2014-01-09T15:00:00.000Z Updated: 2024-08-06T17:39:01.320Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-updates/2014-01/msg00052.html http://lists.x.org/archives/xorg-announce/2014-January/002389.html http://www.debian.org/security/2014/dsa-2838 http://secunia.com/advisories/56357 http://seclists.org/oss-sec/2014/q1/33	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2895`	vulnerable	2026-06-03 14:31:11.044629	Details available The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896. Published: 2011-08-19T17:00:00.000Z Updated: 2024-08-06T23:15:31.486Z Open on db.gcve.eu Reference links https://support.apple.com/HT205635 http://www.redhat.com/support/errata/RHSA-2011-1154.html http://www.ubuntu.com/usn/USN-1191-1 http://www.openwall.com/lists/oss-security/2011/08/10/10 https://bugzilla.redhat.com/show_bug.cgi?id=725760	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.