Buffer overflow in X.org X Font Server

CVE-2007-4568

Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.

Vulnerability class: Buffer Overflow

EPSS: 0.040 (89.4th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References