MGASA-2014-0278
- Source
- https://advisories.mageia.org/MGASA-2014-0278.html
- Import Source
- https://advisories.mageia.org/MGASA-2014-0278.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2014-0278
- Related
- Published
- 2014-07-04T17:51:51Z
- Modified
- 2014-07-04T17:51:43Z
- Summary
- Updated libxfont packages fix security vulnerabilities
- Details
-
Ilja van Sprundel discovered that libXfont incorrectly handled font metadata file parsing. A local attacker could use this issue to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges (CVE-2014-0209).
Ilja van Sprundel discovered that libXfont incorrectly handled X Font Server replies. A malicious font server could return specially-crafted data that could cause libXfont to crash, or possibly execute arbitrary code (CVE-2014-0210, CVE-2014-0211).
- References
- Credits
-
-
- Mageia - COORDINATOR
-