Описание
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.
A flaw was found in libXfont2. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service (DoS) by providing a specially crafted Portable Compiled Format (PCF) font file. Due to missing bounds checks when processing font properties in the ComputeScaledProperties function, duplicate property entries can overflow a fixed-size heap buffer, leading to memory corruption.
Отчет
This vulnerability is rated as having an Important impact because a local authenticated user or X client can exploit memory corruption within processes utilizing libXfont2 to potentially execute arbitrary code or trigger a denial of service. By supplying crafted Portable Compiled Format (PCF) font data containing redundant property entries, the library writes beyond allocated buffer bounds during font property calculations. Headless servers and systems operating without active graphical display servers do not expose this functionality and are not affected.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Дополнительная информация
Статус:
EPSS
8.8 High
CVSS3
Связанные уязвимости
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.
libXfont2 computeProps Property Buffer Heap Buffer Overflow
A heap buffer overflow due to missing size checking in the property bu ...
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.
EPSS
8.8 High
CVSS3