CVE-2007-1352 Integer overflow in n/a
Remote authenticated users can execute arbitrary code via a heap overflow caused by an integer overflow in the FontFileInitTable function.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-1352?
CVE-2007-1352 is a low-severity vulnerability in Openbsd Openbsd, published on 6 Apr 2007. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.
Which versions are affected by CVE-2007-1352?
It affects 12 products.
Products include Mandrakesoft Mandrake Multi Network Firewall, Openbsd Openbsd, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop, Redhat Fedora Core, Redhat Linux and 6 more.
How do I fix CVE-2007-1352?
Upgrade to a fixed version.
Is CVE-2007-1352 being exploited?
There is no known exploitation of CVE-2007-1352 in the wild and no public exploit code.
Other vulnerabilities in Openbsd Openbsd
Sources
Also known as DEBIAN-CVE-2007-1352, GHSA-75c4-gh94-3wrw.