A vulnerability has been reported in XFree86, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

The vulnerability is caused due to integer overflows in the PCF font parser and can be exploited to crash the X server and potentially execute arbitrary code.

This is related to:
SA20100

Solution
Do not parse untrusted PCF font files.

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area