CVE-2006-3739

Publication date 13 September 2006

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics (AFM) files with a modified number of character metrics (StartCharMetrics), which leads to a heap-based buffer overflow.

Status

Package Ubuntu Release Status
libxfont 7.04 feisty
Not affected
6.10 edgy
Fixed 1.2.0-0ubuntu3
6.06 LTS dapper
Fixed 1.0.0-0ubuntu3.3
xorg 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected

References

Related Ubuntu Security Notices (USN)

    • USN-344-1
    • X.org vulnerabilities
    • 13 September 2006

Other references