CVE-2004-0083: Buffer Overflow

Published Feb 14, 2004

Updated

Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.

Affected Software

9 affected components

Xfree86 Project X11r6=4.1.0

Xfree86 Project X11r6=4.3.0

Xfree86 Project X11r6=4.2.1

Xfree86 Project X11r6=4.2.0

Xfree86 Project X11r6=4.1.12

Xfree86 Project X11r6=4.2.1

Xfree86 Project X11r6=4.1.11

OpenBSD OpenBSD=3.3

OpenBSD OpenBSD=3.4

Remediation

Patch Available

http://www.securityfocus.com/bid/9636

Event History

Feb 14, 2004

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0083?

CVE-2004-0083 is classified as a high-severity vulnerability due to its potential to allow arbitrary code execution.

How do I fix CVE-2004-0083?

To fix CVE-2004-0083, upgrade to a patched version of the XFree86 X server that is not affected by this vulnerability.

What software versions are affected by CVE-2004-0083?

CVE-2004-0083 affects XFree86 versions 4.1.0 through 4.3.0, including specific minor versions like 4.1.11 and 4.2.0.

Can CVE-2004-0083 be exploited remotely?

Yes, CVE-2004-0083 can be exploited by remote attackers through crafted font alias files.

What is the nature of the vulnerability in CVE-2004-0083?

CVE-2004-0083 is caused by a buffer overflow in the ReadFontAlias function within the XFree86 X server.