CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-0209

Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.0%

CVSS Severity

CVSS v2 Score 4.6

References

Products affected by CVE-2014-0209

X » Libxfont » Version: 1.0.0

cpe:2.3:a:x:libxfont:1.0.0
X » Libxfont » Version: 1.1.0

cpe:2.3:a:x:libxfont:1.1.0
X » Libxfont » Version: 1.2.0

cpe:2.3:a:x:libxfont:1.2.0
X » Libxfont » Version: 1.2.1

cpe:2.3:a:x:libxfont:1.2.1
X » Libxfont » Version: 1.2.2

cpe:2.3:a:x:libxfont:1.2.2
X » Libxfont » Version: 1.2.3

cpe:2.3:a:x:libxfont:1.2.3
X » Libxfont » Version: 1.2.4

cpe:2.3:a:x:libxfont:1.2.4
X » Libxfont » Version: 1.2.5

cpe:2.3:a:x:libxfont:1.2.5
X » Libxfont » Version: 1.2.6

cpe:2.3:a:x:libxfont:1.2.6
X » Libxfont » Version: 1.2.7

cpe:2.3:a:x:libxfont:1.2.7
X » Libxfont » Version: 1.2.8

cpe:2.3:a:x:libxfont:1.2.8
X » Libxfont » Version: 1.2.9

cpe:2.3:a:x:libxfont:1.2.9
X » Libxfont » Version: 1.3.0

cpe:2.3:a:x:libxfont:1.3.0
X » Libxfont » Version: 1.3.1

cpe:2.3:a:x:libxfont:1.3.1
X » Libxfont » Version: 1.3.2

cpe:2.3:a:x:libxfont:1.3.2
X » Libxfont » Version: 1.3.3

cpe:2.3:a:x:libxfont:1.3.3
X » Libxfont » Version: 1.3.4

cpe:2.3:a:x:libxfont:1.3.4
X » Libxfont » Version: 1.4.0

cpe:2.3:a:x:libxfont:1.4.0
X » Libxfont » Version: 1.4.1

cpe:2.3:a:x:libxfont:1.4.1
X » Libxfont » Version: 1.4.2

cpe:2.3:a:x:libxfont:1.4.2
X » Libxfont » Version: 1.4.3

cpe:2.3:a:x:libxfont:1.4.3
X » Libxfont » Version: 1.4.4

cpe:2.3:a:x:libxfont:1.4.4
X » Libxfont » Version: 1.4.5

cpe:2.3:a:x:libxfont:1.4.5
X » Libxfont » Version: 1.4.6

cpe:2.3:a:x:libxfont:1.4.6
X » Libxfont » Version: 1.4.7

cpe:2.3:a:x:libxfont:1.4.7
X » Libxfont » Version: 1.4.99

cpe:2.3:a:x:libxfont:1.4.99
Canonical » Ubuntu Linux » Version: 10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 12.10

cpe:2.3:o:canonical:ubuntu_linux:12.10
Canonical » Ubuntu Linux » Version: 13.10

cpe:2.3:o:canonical:ubuntu_linux:13.10
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-0209

Products

Pricing

Contact Us