high
8.5
CWE
189 190
Advisory Published
Updated

CVE-2007-1351: Integer Overflow

First published: Fri Apr 06 2007(Updated: )

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.

Credit: secalert@redhat.com

Affected SoftwareAffected VersionHow to fix
Ubuntu=6.10
Ubuntu=5.10
Ubuntu=6.06_lts
Ubuntu=5.10
Ubuntu=6.10
Ubuntu=5.10
Ubuntu=5.10
Ubuntu=6.06_lts
Ubuntu=6.10
Ubuntu=6.06_lts
Ubuntu=6.06_lts
Ubuntu=6.10
XFree86 X Server=4.3.0.2
XFree86 X Server=4.3.0
X.Org LibXfont=1.2.2
XFree86 X Server=4.3.0.1
Rpath Linux=1
Red Hat Enterprise Linux=2.1
Red Hat Enterprise Linux=4.0
Red Hat Enterprise Linux=5.0
redhat enterprise Linux desktop=3.0
Red Hat Linux Advanced Workstation=2.1
Red Hat Enterprise Linux=4.0
Red Hat Enterprise Linux=3.0
Red Hat Enterprise Linux=5.0
Red Hat Enterprise Linux=2.1
Red Hat Linux Advanced Workstation=2.1
Red Hat Enterprise Linux=2.1
Red Hat Enterprise Linux=4.0
Red Hat Enterprise Linux=3.0
Red Hat Enterprise Linux=2.1
Red Hat Enterprise Linux=3.0
Red Hat Enterprise Linux=2.1
redhat enterprise Linux desktop=4.0
Red Hat Enterprise Linux=5.0
Red Hat Enterprise Linux=2.1
OpenBSD=3.9
OpenBSD=4.0
Mandrake Linux=2007
Mandrake Linux=2007
Mandriva Linux Corporate Server=3.0
Mandriva Linux Corporate Server=3.0
Mandriva Linux Corporate Server=4.0
Mandriva Linux Corporate Server=4.0
Mandrakesoft Mandrake Multi Network Firewall=2.0

Remedy

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501

Remedy

http://www.securityfocus.com/bid/23283

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2007-1351?

    CVE-2007-1351 is considered a critical vulnerability due to its potential to allow remote authenticated users to execute arbitrary code.

  • How do I fix CVE-2007-1351?

    To fix CVE-2007-1351, update libXfont and freetype to a version later than 1.2.2 and 2.3.2 respectively.

  • Who is affected by CVE-2007-1351?

    CVE-2007-1351 affects various versions of Ubuntu Linux, Red Hat Enterprise Linux, OpenBSD, and X.Org libXfont among others.

  • What types of vulnerabilities does CVE-2007-1351 represent?

    CVE-2007-1351 represents an integer overflow vulnerability leading to a heap overflow.

  • Can CVE-2007-1351 be exploited remotely?

    Yes, CVE-2007-1351 can be exploited remotely by authenticated users through the use of crafted BDF fonts.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203