CVE-2008-0006

HIGH 7.5CVE-2008-0006 · Published 18/01/2008 · updated 16/06/2026

In short

CVE-2008-0006 is a HIGH (CVSS 7.5) vulnerability affecting xserver (x.org).
Chance of exploitation in the next 30 days (EPSS): 5.1%, higher than 92.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xserver x.org	`≤ 1.4`	No fix yet

Description

Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table.

References

bugs.gentoo.org/show_bug.cgi
docs.info.apple.com/article.html
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp
jvn.jp/en/jp/JVN88935101/index.html
jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001043.html
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
lists.freedesktop.org/archives/xorg/2008-January/031918.html · Patch
lists.opensuse.org/opensuse-security-announce/2008-01/msg00004.html
lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
secunia.com/advisories/28273 · Vendor Advisory
secunia.com/advisories/28500 · Vendor Advisory
secunia.com/advisories/28532 · Vendor Advisory
secunia.com/advisories/28535

More vulnerabilities in xserver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free