CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-0211

Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs reply, which triggers a buffer overflow.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.021

EPSS Ranking 83.1%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2014-0211

X » Libxfont » Version: 1.0.0

cpe:2.3:a:x:libxfont:1.0.0
X » Libxfont » Version: 1.1.0

cpe:2.3:a:x:libxfont:1.1.0
X » Libxfont » Version: 1.2.0

cpe:2.3:a:x:libxfont:1.2.0
X » Libxfont » Version: 1.2.1

cpe:2.3:a:x:libxfont:1.2.1
X » Libxfont » Version: 1.2.2

cpe:2.3:a:x:libxfont:1.2.2
X » Libxfont » Version: 1.2.3

cpe:2.3:a:x:libxfont:1.2.3
X » Libxfont » Version: 1.2.4

cpe:2.3:a:x:libxfont:1.2.4
X » Libxfont » Version: 1.2.5

cpe:2.3:a:x:libxfont:1.2.5
X » Libxfont » Version: 1.2.6

cpe:2.3:a:x:libxfont:1.2.6
X » Libxfont » Version: 1.2.7

cpe:2.3:a:x:libxfont:1.2.7
X » Libxfont » Version: 1.2.8

cpe:2.3:a:x:libxfont:1.2.8
X » Libxfont » Version: 1.2.9

cpe:2.3:a:x:libxfont:1.2.9
X » Libxfont » Version: 1.3.0

cpe:2.3:a:x:libxfont:1.3.0
X » Libxfont » Version: 1.3.1

cpe:2.3:a:x:libxfont:1.3.1
X » Libxfont » Version: 1.3.2

cpe:2.3:a:x:libxfont:1.3.2
X » Libxfont » Version: 1.3.3

cpe:2.3:a:x:libxfont:1.3.3
X » Libxfont » Version: 1.3.4

cpe:2.3:a:x:libxfont:1.3.4
X » Libxfont » Version: 1.4.0

cpe:2.3:a:x:libxfont:1.4.0
X » Libxfont » Version: 1.4.1

cpe:2.3:a:x:libxfont:1.4.1
X » Libxfont » Version: 1.4.2

cpe:2.3:a:x:libxfont:1.4.2
X » Libxfont » Version: 1.4.3

cpe:2.3:a:x:libxfont:1.4.3
X » Libxfont » Version: 1.4.4

cpe:2.3:a:x:libxfont:1.4.4
X » Libxfont » Version: 1.4.5

cpe:2.3:a:x:libxfont:1.4.5
X » Libxfont » Version: 1.4.6

cpe:2.3:a:x:libxfont:1.4.6
X » Libxfont » Version: 1.4.7

cpe:2.3:a:x:libxfont:1.4.7
X » Libxfont » Version: 1.4.99

cpe:2.3:a:x:libxfont:1.4.99
Canonical » Ubuntu Linux » Version: 10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 12.10

cpe:2.3:o:canonical:ubuntu_linux:12.10
Canonical » Ubuntu Linux » Version: 13.10

cpe:2.3:o:canonical:ubuntu_linux:13.10
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-0211

Products

Pricing

Contact Us