X11 libXfont CID-indkodede fonte heltals-overflows - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

X11 libXfont CID-indkodede fonte heltals-overflows

Secunia Advisory:	SA21864
Udsendt:	2006-09-13

Kritisk:	Mindre kritisk
Betydning:	Rettighedseskalering
Hvor:	Lokalt System
Løsning Status:	Producent Patch

Software:	X Window System 11 (X11) 6.x X Window System 11 (X11) 7.x

CVE reference:	CVE-2006-3739 (Secunia mirror) CVE-2006-3740 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Beskrivelse: Der er rapporteret nogle sårbarheder i libXfont, som kan udnyttes af ondsindede, lokale brugere til at opnå eskalerede rettigheder. Sårbarhederne skyldes heltal-overflows i funktionen "scan_cid()" under håndteringen af CMAP- og CIDFont-data samt funktionen "CIDADM()" under fortolkningen af AFM-filer (Adobe Font Metric). Dette kan udnyttes til at forårsage buffer overflows via specielt udformede CID-indkodede Type1 fonte. Succesfuld udnyttelse kan muliggøre eksekvering af vilkårlig kode med eskalerede rettigheder, men forudsætter adgang til kommandoen "xset fp+" eller lignende. Sårbarhederne er rapporteret i X11 X.Org 6.7.0 til og med 7.1. Løsning: Opdatér til libXfont 1.2.2, eller installér patches. X11 X.Org 6.8.2: http://xorg.freedesktop.org/releases/X11R6.8.2/patches/xorg-68x-cidfonts.patch X11 X.Org 6.9.0: http://xorg.freedesktop.org/releases/X11R6.9.0/patches/x11r6.9.0-cidfonts.diff X11 X.Org 7.0 / libXfont 1.0.0: http://xorg.freedesktop.org/releases/.../patches/libXfont-1.0.0-cidfonts.diff X11 X.Org 7.1 / libXfont 1.1.0: http://xorg.freedesktop.org/releases/.../patches/libXfont-1.1.0-cidfonts.diff Rapporteret af / Kredit: Fundet af en anonym person og rapporteret via iDEFENSE. Original Advisory: X.Org: http://lists.freedesktop.org/archives/xorg/2006-September/018021.html iDEFENSE: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=411 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=412



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

16 Relaterede Secunia Advisories, displaying 10

1. X.org X11 flere sårbarheder

2. X.Org X11 X Font Server flere sårbarheder

3. X.org X11 composite pixmap rettighedseskalering

4. X.Org X11 flere sårbarheder

5. X.Org X11 "DBE" og "Render" udvidelse sårbarheder

6. libX11 XCOMPOSEFILE fil-descriptor læk

7. X.Org X11 X Display Manager "Xsession" script sikkerhedsproblem

8. X11 "_XKB_CHARSET" buffer overflow sårbarhed

9. X.Org X11 setuid sikkerhedsproblem

10. X11 libXfont PCF heltals-overflow sårbarhed

Vis alle relaterede advisories

Send Feedback to Secunia

Hvis du har ny information angående dette Secunia advisory eller et produkt i vores database, så send det venligst til os. Du kan sende det til os enten ved at bruge vores web formular eller ved at sende det til vuln@secunia.com. Ideer, foreslag og andet feedback er også meget velkommen.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	HP TCP/IP Services for OpenVMS Finger Format String Vulnerability

2.	Sun Solaris Kernel Covert Channel Security Bypass

3.	Blogn Cross-Site Scripting and Cross-Site Request Forgery

4.	Slackware update for amarok

5.	dotProject SQL Injection and Cross-Site Scripting

6.	Novell eDirectory Multiple Vulnerabilities

7.	Adium MSN SLP Message Integer Overflow Vulnerabilities

8.	Novell Forum TCL Command Injection Vulnerability

9.	Caudium "configvar" Insecure Temporary Files

10.	geo-* Insecure Temporary Files