HTTP: X.Org X Server PCF Font Parser Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the X.Org X Server. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server's process.

Extended Description

X.Org X Server is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit this issue to execute arbitrary code with the privileges of the server. Failed attacks will cause denial-of-service conditions. NOTE: This vulnerability was previously covered in BID 27336 (X.Org X Server Multiple Local Privilege Escalation and Information Disclosure Vulnerabilities), but has been given its own record to better document the issue.

Affected Products

Hp hp-ux

References

BugTraq: 27352

CVE: CVE-2008-0006

Short Name

HTTP:STC:DL:XORG-PCF-BO

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: X.Org X Server PCF Font Parser Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?