CVE-2007-1352 : Detail

CVE-2007-1352

6.13%V3
Adjacent Network
2007-04-05
23h00 +00:00
2018-10-16
12h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 3.8 AV:A/AC:M/Au:S/C:N/I:P/A:P [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Mandrakesoft>>Mandrake_linux >> Version 9.1

Mandrakesoft>>Mandrake_linux >> Version 9.1

    Mandrakesoft>>Mandrake_linux >> Version 9.2

    Mandrakesoft>>Mandrake_linux >> Version 9.2

      Mandrakesoft>>Mandrake_linux >> Version 10.0

      Mandrakesoft>>Mandrake_linux >> Version 10.0

        Mandrakesoft>>Mandrake_linux >> Version 2007

        Mandrakesoft>>Mandrake_linux >> Version 2007

          Mandrakesoft>>Mandrake_linux_corporate_server >> Version 3.0

          Mandrakesoft>>Mandrake_linux_corporate_server >> Version 3.0

            Mandrakesoft>>Mandrake_linux_corporate_server >> Version 4.0

            Mandrakesoft>>Mandrake_linux_corporate_server >> Version 4.0

              Mandrakesoft>>Mandrake_multi_network_firewall >> Version 2.0

              Configuraton 0

              X.org>>Libxfont >> Version 1.2.2

                Configuraton 0

                Redhat>>Enterprise_linux >> Version 2.1

                  Redhat>>Enterprise_linux >> Version 2.1

                    Redhat>>Enterprise_linux >> Version 2.1

                      Redhat>>Enterprise_linux >> Version 2.1

                        Redhat>>Enterprise_linux >> Version 2.1

                          Redhat>>Enterprise_linux >> Version 2.1

                            Redhat>>Enterprise_linux >> Version 3.0

                            Redhat>>Enterprise_linux >> Version 3.0

                            Redhat>>Enterprise_linux >> Version 3.0

                            Redhat>>Enterprise_linux >> Version 4.0

                              Redhat>>Enterprise_linux >> Version 4.0

                                Redhat>>Enterprise_linux >> Version 4.0

                                  Redhat>>Enterprise_linux_desktop >> Version 3.0

                                  Redhat>>Enterprise_linux_desktop >> Version 4.0

                                  Redhat>>Enterprise_linux_desktop >> Version 5.0

                                    Redhat>>Enterprise_linux_desktop >> Version 5.0

                                      Redhat>>Fedora_core >> Version core_1.0

                                        Redhat>>Linux >> Version 9.0

                                          Redhat>>Linux_advanced_workstation >> Version 2.1

                                            Redhat>>Linux_advanced_workstation >> Version 2.1

                                              Configuraton 0

                                              Slackware>>Slackware_linux >> Version 9.0

                                              Slackware>>Slackware_linux >> Version 9.1

                                              Slackware>>Slackware_linux >> Version current

                                              Configuraton 0

                                              Turbolinux>>Turbolinux_desktop >> Version 10.0

                                                Configuraton 0

                                                Ubuntu>>Ubuntu_linux >> Version 4.1

                                                  Ubuntu>>Ubuntu_linux >> Version 4.1

                                                    Ubuntu>>Ubuntu_linux >> Version 4.1

                                                      Ubuntu>>Ubuntu_linux >> Version 5.10

                                                        Ubuntu>>Ubuntu_linux >> Version 5.10

                                                          Ubuntu>>Ubuntu_linux >> Version 5.10

                                                            Ubuntu>>Ubuntu_linux >> Version 5.10

                                                              Ubuntu>>Ubuntu_linux >> Version 6.06_lts

                                                                Ubuntu>>Ubuntu_linux >> Version 6.06_lts

                                                                  Ubuntu>>Ubuntu_linux >> Version 6.06_lts

                                                                    Ubuntu>>Ubuntu_linux >> Version 6.06_lts

                                                                      Ubuntu>>Ubuntu_linux >> Version 6.10

                                                                        Ubuntu>>Ubuntu_linux >> Version 6.10

                                                                          Ubuntu>>Ubuntu_linux >> Version 6.10

                                                                            Ubuntu>>Ubuntu_linux >> Version 6.10

                                                                              Configuraton 0

                                                                              Rpath>>Linux >> Version 1

                                                                                Configuraton 0

                                                                                Openbsd>>Openbsd >> Version 3.9

                                                                                Openbsd>>Openbsd >> Version 4.0

                                                                                References

                                                                                http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=502
                                                                                Tags : third-party-advisory, x_refsource_IDEFENSE
                                                                                http://secunia.com/advisories/24745
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://secunia.com/advisories/33937
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://secunia.com/advisories/24771
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://secunia.com/advisories/24770
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://secunia.com/advisories/25006
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://secunia.com/advisories/24756
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://www.securityfocus.com/bid/23283
                                                                                Tags : vdb-entry, x_refsource_BID
                                                                                http://www.redhat.com/support/errata/RHSA-2007-0126.html
                                                                                Tags : vendor-advisory, x_refsource_REDHAT
                                                                                http://www.securityfocus.com/bid/23300
                                                                                Tags : vdb-entry, x_refsource_BID
                                                                                http://support.apple.com/kb/HT3438
                                                                                Tags : x_refsource_CONFIRM
                                                                                http://security.gentoo.org/glsa/glsa-200705-10.xml
                                                                                Tags : vendor-advisory, x_refsource_GENTOO
                                                                                http://www.ubuntu.com/usn/usn-448-1
                                                                                Tags : vendor-advisory, x_refsource_UBUNTU
                                                                                http://www.mandriva.com/security/advisories?name=MDKSA-2007:080
                                                                                Tags : vendor-advisory, x_refsource_MANDRIVA
                                                                                http://secunia.com/advisories/24758
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://www.securitytracker.com/id?1017857
                                                                                Tags : vdb-entry, x_refsource_SECTRACK
                                                                                http://secunia.com/advisories/25195
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://rhn.redhat.com/errata/RHSA-2007-0125.html
                                                                                Tags : vendor-advisory, x_refsource_REDHAT
                                                                                http://secunia.com/advisories/24741
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://secunia.com/advisories/24791
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://www.debian.org/security/2007/dsa-1294
                                                                                Tags : vendor-advisory, x_refsource_DEBIAN
                                                                                http://secunia.com/advisories/24765
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://secunia.com/advisories/25216
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://www.vupen.com/english/advisories/2007/1548
                                                                                Tags : vdb-entry, x_refsource_VUPEN
                                                                                http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1
                                                                                Tags : vendor-advisory, x_refsource_SUNALERT
                                                                                http://www.vupen.com/english/advisories/2007/1217
                                                                                Tags : vdb-entry, x_refsource_VUPEN
                                                                                http://www.openbsd.org/errata40.html#011_xorg
                                                                                Tags : vendor-advisory, x_refsource_OPENBSD
                                                                                http://secunia.com/advisories/25004
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://secunia.com/advisories/25305
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://www.redhat.com/support/errata/RHSA-2007-0132.html
                                                                                Tags : vendor-advisory, x_refsource_REDHAT
                                                                                http://secunia.com/advisories/24772
                                                                                Tags : third-party-advisory, x_refsource_SECUNIA
                                                                                http://www.openbsd.org/errata39.html#021_xorg
                                                                                Tags : vendor-advisory, x_refsource_OPENBSD
                                                                                http://www.mandriva.com/security/advisories?name=MDKSA-2007:079
                                                                                Tags : vendor-advisory, x_refsource_MANDRIVA