CVE-2013-6462

Publication date 7 January 2014

Last updated 24 July 2024

Ubuntu priority

Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
libxfont	13.10 saucy	Fixed 1:1.4.6-1ubuntu0.1
	13.04 raring	Fixed 1:1.4.5-2ubuntu0.13.04.1
	12.10 quantal	Fixed 1:1.4.5-2ubuntu0.12.10.1
	12.04 LTS precise	Fixed 1:1.4.4-1ubuntu0.1
	10.04 LTS lucid	Fixed 1:1.4.1-1ubuntu0.2

How can I get the fixes?
What do statuses mean?
Patch details

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
libxfont	Upstream: ?id=4d0

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-2078-1
libXfont vulnerability
7 January 2014

Other references

https://www.cve.org/CVERecord?id=CVE-2013-6462