CWE Code: 189
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Numeric Errors
Summary: multiple integer overflows in the (1) fontfileaddentry and (2) lexalias functions in x.org libxfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2014-05-15
Last Modified Date: 2018-10-09