---
title: "CVE-2006-3740\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2006-3740?format=md
keywords: index, follow
---

# CVE-2006-3740

Publication date 13 September 2006

Last updated 17 July 2025

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

Integer overflow in the scan\_cidfont function in X.Org 6.8.2 and XFree86 X
server allows local users to execute arbitrary code via crafted (1) CMap
and (2) CIDFont font data with modified item counts in the (a)
begincodespacerange, (b) cidrange, and (c) notdefrange sections.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| libxfont | 7.04 feisty | Not affected |
| 6.10 edgy | Fixed 1.2.0-0ubuntu3 |
| 6.06 LTS dapper | Fixed 1.0.0-0ubuntu3.3 |
| xorg | 7.04 feisty | Not affected |
| 6.10 edgy | Not affected |
| 6.06 LTS dapper | Not affected |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3740)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2006-3740)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2006-3740)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2006-3740)

### Related Ubuntu Security Notices (USN)

+ [USN-344-1](https://usn.ubuntu.com/USN-344-1)
+ X.org vulnerabilities
+ 13 September 2006

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2006-3740>