CVE-2015-1802: Buffer Overflow
The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a (1) negative or (2) large property count in a BDF font file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1802?
CVE-2015-1802 is considered a high severity vulnerability that can lead to denial of service or potential arbitrary code execution.
How do I fix CVE-2015-1802?
To fix CVE-2015-1802, update X.Org libXfont to version 1.4.9 or later.
What causes CVE-2015-1802?
CVE-2015-1802 is caused by a flaw in the bdfReadProperties function that allows for out-of-bounds writes due to improper handling of BDF font file properties.
Which versions of X.Org libXfont are affected by CVE-2015-1802?
CVE-2015-1802 affects X.Org libXfont versions prior to 1.4.9 and 1.5.0, specifically version 1.5.0.
Can CVE-2015-1802 be exploited remotely?
Yes, CVE-2015-1802 can be exploited by remote authenticated users through specially crafted BDF font files.