CVE-2015-1804

Name of the Vulnerable Software and Affected Versions libXfont versions prior to 1.4.9 libXfont versions 1.5.x prior to 1.5.1

Description The issue is related to the bdfReadCharacters function in bitmap/bdfread.c, which does not properly perform type conversion for metrics values. This allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.

Recommendations For libXfont versions prior to 1.4.9, update to version 1.4.9 or later. For libXfont versions 1.5.x prior to 1.5.1, update to version 1.5.1 or later.