CVE-2007-4568 Integer overflow in n/a
Integer overflow in X.Org X Font Server allows remote attackers to execute arbitrary code via crafted protocol requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-4568?
CVE-2007-4568 is a medium-severity vulnerability in n/a, published on 5 Oct 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.
Which versions are affected by CVE-2007-4568?
It affects 1 product.
Linux distribution packages (1)
xorg-x11 openSUSE:Tumbleweed | All versions | 7.6_1-16.13 |
Products include X.org X Font Server.
How do I fix CVE-2007-4568?
Upgrade to a fixed version.
Is CVE-2007-4568 being exploited?
There is no known exploitation of CVE-2007-4568 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as CVE-2007-4989, GHSA-j878-j5h9-9j88, openSUSE-SU-2024:11524-1.