CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-1804

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.031

EPSS Ranking 86.1%

CVSS Severity

CVSS v2 Score 8.5

References

Products affected by CVE-2015-1804

X » Libxfont » Version: 1.0.0

cpe:2.3:a:x:libxfont:1.0.0
X » Libxfont » Version: 1.1.0

cpe:2.3:a:x:libxfont:1.1.0
X » Libxfont » Version: 1.2.0

cpe:2.3:a:x:libxfont:1.2.0
X » Libxfont » Version: 1.2.1

cpe:2.3:a:x:libxfont:1.2.1
X » Libxfont » Version: 1.2.2

cpe:2.3:a:x:libxfont:1.2.2
X » Libxfont » Version: 1.2.3

cpe:2.3:a:x:libxfont:1.2.3
X » Libxfont » Version: 1.2.4

cpe:2.3:a:x:libxfont:1.2.4
X » Libxfont » Version: 1.2.5

cpe:2.3:a:x:libxfont:1.2.5
X » Libxfont » Version: 1.2.6

cpe:2.3:a:x:libxfont:1.2.6
X » Libxfont » Version: 1.2.7

cpe:2.3:a:x:libxfont:1.2.7
X » Libxfont » Version: 1.2.8

cpe:2.3:a:x:libxfont:1.2.8
X » Libxfont » Version: 1.2.9

cpe:2.3:a:x:libxfont:1.2.9
X » Libxfont » Version: 1.3.0

cpe:2.3:a:x:libxfont:1.3.0
X » Libxfont » Version: 1.3.1

cpe:2.3:a:x:libxfont:1.3.1
X » Libxfont » Version: 1.3.2

cpe:2.3:a:x:libxfont:1.3.2
X » Libxfont » Version: 1.3.3

cpe:2.3:a:x:libxfont:1.3.3
X » Libxfont » Version: 1.3.4

cpe:2.3:a:x:libxfont:1.3.4
X » Libxfont » Version: 1.4.0

cpe:2.3:a:x:libxfont:1.4.0
X » Libxfont » Version: 1.4.1

cpe:2.3:a:x:libxfont:1.4.1
X » Libxfont » Version: 1.4.2

cpe:2.3:a:x:libxfont:1.4.2
X » Libxfont » Version: 1.4.3

cpe:2.3:a:x:libxfont:1.4.3
X » Libxfont » Version: 1.4.4

cpe:2.3:a:x:libxfont:1.4.4
X » Libxfont » Version: 1.4.5

cpe:2.3:a:x:libxfont:1.4.5
X » Libxfont » Version: 1.4.6

cpe:2.3:a:x:libxfont:1.4.6
X » Libxfont » Version: 1.4.7

cpe:2.3:a:x:libxfont:1.4.7
X » Libxfont » Version: 1.4.8

cpe:2.3:a:x:libxfont:1.4.8
X » Libxfont » Version: 1.5.0

cpe:2.3:a:x:libxfont:1.5.0
Canonical » Ubuntu Linux » Version: 10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 14.10

cpe:2.3:o:canonical:ubuntu_linux:14.10
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-1804

Products

Pricing

Contact Us