CVE-2007-1352

LOW 3.8CVE-2007-1352 · Published 06/04/2007 · updated 16/06/2026

In short

CVE-2007-1352 is a LOW (CVSS 3.8) vulnerability affecting mandrake multi network firewall (mandrakesoft), libxfont (x.org).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mandrake multi network firewall mandrakesoft	`= 2.0`	No fix yet
libxfont x.org	`= 1.2.2`	No fix yet

Description

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.

References

issues.foresightlinux.org/browse/FL-223
labs.idefense.com/intelligence/vulnerabilities/display.php
lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html
lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html
rhn.redhat.com/errata/RHSA-2007-0125.html
secunia.com/advisories/24741 · Vendor Advisory
secunia.com/advisories/24745
secunia.com/advisories/24756 · Patch
secunia.com/advisories/24758
secunia.com/advisories/24765
secunia.com/advisories/24770 · Patch
secunia.com/advisories/24771
secunia.com/advisories/24772

More vulnerabilities in mandrake multi network firewall

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free