Secunia

Some vulnerabilities have been reported in XFree86, which can be exploited by malicious, local users to gain escalated privileges.

Integer overflows exist within the "scan_cidfont()" function when handling CMap and CIDFont data, and the "CIDAFM()" function when parsing AFM (Adobe Font Metric) files. These can potentially be exploited to execute arbitrary code via specially crafted CID encoded Type1 fonts.

Successful exploitation may allow to execute arbitrary code with escalated privileges.

Solution
Do not load the "type1" font module.

Provided and/or discovered by
Discovered by an anonymous person and reported via iDEFENSE.

Original Advisory
iDEFENSE:
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=411
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=412

Deep Links
Links available in Customer Area