CVE-2013-6462

Publication date 7 January 2014

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

Status

Package Ubuntu Release Status
libxfont 13.10 saucy
Fixed 1:1.4.6-1ubuntu0.1
13.04 raring
Fixed 1:1.4.5-2ubuntu0.13.04.1
12.10 quantal
Fixed 1:1.4.5-2ubuntu0.12.10.1
12.04 LTS precise
Fixed 1:1.4.4-1ubuntu0.1
10.04 LTS lucid
Fixed 1:1.4.1-1ubuntu0.2

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
libxfont

References

Related Ubuntu Security Notices (USN)

    • USN-2078-1
    • libXfont vulnerability
    • 7 January 2014

Other references