CVE-2008-0006

Publication date 18 January 2008

Last updated 24 July 2024

Ubuntu priority

Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
libxfont	7.10 gutsy	Fixed 1:1.3.0-0ubuntu1.1
	7.04 feisty	Fixed 1:1.2.7-1ubuntu1.1
	6.10 edgy	Fixed 1:1.2.0-0ubuntu3.2
	6.06 LTS dapper	Fixed 1:1.0.0-0ubuntu3.4
xorg-server	7.10 gutsy	Fixed 2:1.3.0.0.dfsg-12ubuntu8.1
	7.04 feisty	Fixed 2:1.2.0-3ubuntu8.1
	6.10 edgy	Fixed 1:1.1.1-0ubuntu12.3
	6.06 LTS dapper	Fixed 1:1.0.2-0ubuntu10.8

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-571-1
X.org vulnerabilities
18 January 2008

Other references

https://www.cve.org/CVERecord?id=CVE-2008-0006