Vulnerability in Xfstt
CVE-2003-0581
X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a (1) FS_QueryXExtents8 or (2) FS_QueryXBitmaps8 packet, and possibly other types of packets, with a large num_ranges value, which causes an out-of-bounds array access.
EPSS: 0.025 (83.0th percentile) — read the EPSS interpretation.
Affected products
- Xfstt — versions 1.2.1, 1.4
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)