CVE-2013-6462

Description

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

10.07

Associated Vulnerability

Vulnerability	OS Platform
X11 font rasterisation library (USN-2078-1) libxfont1_1.4.4-1ubuntu0.3_i386.deb	Linux
X11 font rasterisation library (USN-2078-1) libxfont1_1.4.4-1ubuntu0.3_amd64.deb	Linux
Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-6462)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234