CVE-2008-0006: Buffer Overflow
Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCFBDFENCODINGS table.
Other sources
Takuya Shiozaki of CodeBlog discovered a heap based buffer overflow flaw in X.org's PCF font handler.
This flaw is being tracked as VU#203220 by CERT.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0006?
CVE-2008-0006 has a high severity rating due to the potential for arbitrary code execution from a buffer overflow.
How do I fix CVE-2008-0006?
To fix CVE-2008-0006, update the X.Org Xserver and the affected libfont and libXfont libraries to their latest stable versions.
What systems are affected by CVE-2008-0006?
CVE-2008-0006 affects systems running X.Org Xserver versions before 1.4.1, and certain versions of libfont and libXfont on platforms like Sun Solaris.
What type of attack can be executed using CVE-2008-0006?
CVE-2008-0006 allows context-dependent attackers to execute arbitrary code by exploiting a buffer overflow through specially crafted PCF fonts.
Is CVE-2008-0006 still a concern in modern systems?
CVE-2008-0006 is less of a concern in modern systems that have applied necessary updates, but it remains important to ensure all software is current.