Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2007-1351 Details

Description

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://issues.foresightlinux.org/browse/FL-223	CVE
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501	CVE	Patch
http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html	CVE
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html	CVE
http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html	CVE
http://rhn.redhat.com/errata/RHSA-2007-0125.html	CVE
http://secunia.com/advisories/24741	CVE	Vendor Advisory
http://secunia.com/advisories/24745	CVE
http://secunia.com/advisories/24756	CVE
http://secunia.com/advisories/24758	CVE
http://secunia.com/advisories/24765	CVE
http://secunia.com/advisories/24768	CVE
http://secunia.com/advisories/24770	CVE	Vendor Advisory
http://secunia.com/advisories/24771	CVE
http://secunia.com/advisories/24772	CVE
http://secunia.com/advisories/24776	CVE
http://secunia.com/advisories/24791	CVE
http://secunia.com/advisories/24885	CVE
http://secunia.com/advisories/24889	CVE
http://secunia.com/advisories/24921	CVE
http://secunia.com/advisories/24996	CVE
http://secunia.com/advisories/25004	CVE
http://secunia.com/advisories/25006	CVE
http://secunia.com/advisories/25096	CVE
http://secunia.com/advisories/25195	CVE
http://secunia.com/advisories/25216	CVE
http://secunia.com/advisories/25305	CVE
http://secunia.com/advisories/25495	CVE
http://secunia.com/advisories/28333	CVE
http://secunia.com/advisories/30161	CVE
http://secunia.com/advisories/33937	CVE
http://security.gentoo.org/glsa/glsa-200705-02.xml	CVE
http://security.gentoo.org/glsa/glsa-200705-10.xml	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/33417	CVE
https://issues.rpath.com/browse/RPL-1213	CVE
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733	CVE
http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=498954	CVE
http://sourceforge.net/project/shownotes.php?release_id=498954	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266	CVE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810	CVE
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1	CVE
http://support.apple.com/kb/HT3438	CVE
http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm	CVE
http://support.avaya.com/elmodocs2/security/ASA-2007-193.htm	CVE
http://www.debian.org/security/2007/dsa-1294	CVE
http://www.debian.org/security/2008/dsa-1454	CVE
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2007:079	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2007:080	CVE
http://www.mandriva.com/security/advisories?name=MDKSA-2007:081	CVE
http://www.novell.com/linux/security/advisories/2007_27_x.html	CVE
http://www.novell.com/linux/security/advisories/2007_6_sr.html	CVE
http://www.openbsd.org/errata39.html#021_xorg	CVE
http://www.openbsd.org/errata40.html#011_xorg	CVE
http://www.redhat.com/support/errata/RHSA-2007-0126.html	CVE
http://www.redhat.com/support/errata/RHSA-2007-0132.html	CVE
http://www.redhat.com/support/errata/RHSA-2007-0150.html	CVE
http://www.securityfocus.com/archive/1/464686/100/0/threaded	CVE
http://www.securityfocus.com/archive/1/464816/100/0/threaded	CVE
http://www.securityfocus.com/bid/23283	CVE	Patch
http://www.securityfocus.com/bid/23300	CVE
http://www.securityfocus.com/bid/23402	CVE
http://www.securitytracker.com/id?1017857	CVE
http://www.trustix.org/errata/2007/0013/	CVE
http://www.ubuntu.com/usn/usn-448-1	CVE
http://www.vupen.com/english/advisories/2007/1217	CVE
http://www.vupen.com/english/advisories/2007/1264	CVE
http://www.vupen.com/english/advisories/2007/1548	CVE
http://issues.foresightlinux.org/browse/FL-223	[email protected]
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=501	[email protected]	Patch
http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html	[email protected]
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html	[email protected]
http://lists.freedesktop.org/archives/xorg-announce/2007-April/000286.html	[email protected]
http://rhn.redhat.com/errata/RHSA-2007-0125.html	[email protected]
http://secunia.com/advisories/24741	[email protected]	Vendor Advisory
http://secunia.com/advisories/24745	[email protected]
http://secunia.com/advisories/24756	[email protected]
http://secunia.com/advisories/24758	[email protected]
http://secunia.com/advisories/24765	[email protected]
http://secunia.com/advisories/24768	[email protected]
http://secunia.com/advisories/24770	[email protected]	Vendor Advisory
http://secunia.com/advisories/24771	[email protected]
http://secunia.com/advisories/24772	[email protected]
http://secunia.com/advisories/24776	[email protected]
http://secunia.com/advisories/24791	[email protected]
http://secunia.com/advisories/24885	[email protected]
http://secunia.com/advisories/24889	[email protected]
http://secunia.com/advisories/24921	[email protected]
http://secunia.com/advisories/24996	[email protected]
http://secunia.com/advisories/25004	[email protected]
http://secunia.com/advisories/25006	[email protected]
http://secunia.com/advisories/25096	[email protected]
http://secunia.com/advisories/25195	[email protected]
http://secunia.com/advisories/25216	[email protected]
http://secunia.com/advisories/25305	[email protected]
http://secunia.com/advisories/25495	[email protected]
http://secunia.com/advisories/28333	[email protected]
http://secunia.com/advisories/30161	[email protected]
http://secunia.com/advisories/33937	[email protected]
http://security.gentoo.org/glsa/glsa-200705-02.xml	[email protected]
http://security.gentoo.org/glsa/glsa-200705-10.xml	[email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/33417	[email protected]
https://issues.rpath.com/browse/RPL-1213	[email protected]
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733	[email protected]
http://sourceforge.net/project/shownotes.php?group_id=3157&release_id=498954	[email protected]
http://sourceforge.net/project/shownotes.php?release_id=498954	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266	[email protected]
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810	[email protected]
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1	[email protected]
http://support.apple.com/kb/HT3438	[email protected]
http://support.avaya.com/elmodocs2/security/ASA-2007-178.htm	[email protected]
http://support.avaya.com/elmodocs2/security/ASA-2007-193.htm	[email protected]
http://www.debian.org/security/2007/dsa-1294	[email protected]
http://www.debian.org/security/2008/dsa-1454	[email protected]
http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2007:079	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2007:080	[email protected]
http://www.mandriva.com/security/advisories?name=MDKSA-2007:081	[email protected]
http://www.novell.com/linux/security/advisories/2007_27_x.html	[email protected]
http://www.novell.com/linux/security/advisories/2007_6_sr.html	[email protected]
http://www.openbsd.org/errata39.html#021_xorg	[email protected]
http://www.openbsd.org/errata40.html#011_xorg	[email protected]
http://www.redhat.com/support/errata/RHSA-2007-0126.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2007-0132.html	[email protected]
http://www.redhat.com/support/errata/RHSA-2007-0150.html	[email protected]
http://www.securityfocus.com/archive/1/464686/100/0/threaded	[email protected]
http://www.securityfocus.com/archive/1/464816/100/0/threaded	[email protected]
http://www.securityfocus.com/bid/23283	[email protected]	Patch
http://www.securityfocus.com/bid/23300	[email protected]
http://www.securityfocus.com/bid/23402	[email protected]
http://www.securitytracker.com/id?1017857	[email protected]
http://www.trustix.org/errata/2007/0013/	[email protected]
http://www.ubuntu.com/usn/usn-448-1	[email protected]
http://www.vupen.com/english/advisories/2007/1217	[email protected]
http://www.vupen.com/english/advisories/2007/1264	[email protected]
http://www.vupen.com/english/advisories/2007/1548	[email protected]

see all 136 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-189	Numeric Errors	[email protected]

Affected Products

Product	Versions
ubuntu ubuntu linux	5.10 6.06_lts 6.10
CPE cpe:2.3:o:ubuntu:ubuntu_linux:5.10::amd64::::: cpe:2.3:o:ubuntu:ubuntu_linux:5.10::i386::::: cpe:2.3:o:ubuntu:ubuntu_linux:5.10::powerpc::::: cpe:2.3:o:ubuntu:ubuntu_linux:5.10::sparc::::: cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts::amd64::::: cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts::i386::::: cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts::powerpc::::: cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts::sparc::::: cpe:2.3:o:ubuntu:ubuntu_linux:6.10::amd64::::: cpe:2.3:o:ubuntu:ubuntu_linux:6.10::i386::::: cpe:2.3:o:ubuntu:ubuntu_linux:6.10::powerpc::::: cpe:2.3:o:ubuntu:ubuntu_linux:6.10::sparc::::: Remediation No remediation found in references.
x.org libxfont	1.2.2
CPE cpe:2.3:a:x.org:libxfont:1.2.2:::::::* Remediation No remediation found in references.
xfree86 project x11r6	4.3.0 4.3.0.1 4.3.0.2
CPE cpe:2.3:a:xfree86_project:x11r6:4.3.0:::::::* cpe:2.3:a:xfree86_project:x11r6:4.3.0.1:::::::* cpe:2.3:a:xfree86_project:x11r6:4.3.0.2:::::::* Remediation No remediation found in references.
rpath rpath linux	1
CPE cpe:2.3:o:rpath:rpath_linux:1:::::::* Remediation No remediation found in references.
redhat enterprise linux	2.1 3.0 4.0 5.0
CPE cpe:2.3:o:redhat:enterprise_linux:2.1::advanced_server::::: cpe:2.3:o:redhat:enterprise_linux:2.1::advanced_server_ia64::::: cpe:2.3:o:redhat:enterprise_linux:2.1::enterprise_server::::: cpe:2.3:o:redhat:enterprise_linux:2.1::enterprise_server_ia64::::: cpe:2.3:o:redhat:enterprise_linux:2.1::workstation::::: cpe:2.3:o:redhat:enterprise_linux:2.1::workstation_ia64::::: cpe:2.3:o:redhat:enterprise_linux:3.0::advanced_servers::::: cpe:2.3:o:redhat:enterprise_linux:3.0::enterprise_server::::: cpe:2.3:o:redhat:enterprise_linux:3.0::workstation::::: cpe:2.3:o:redhat:enterprise_linux:4.0::advanced_server::::: cpe:2.3:o:redhat:enterprise_linux:4.0::enterprise_server::::: cpe:2.3:o:redhat:enterprise_linux:4.0::workstation::::: cpe:2.3:o:redhat:enterprise_linux:5.0::desktop::::: cpe:2.3:o:redhat:enterprise_linux:5.0::desktop_workstation::::: cpe:2.3:o:redhat:enterprise_linux:5.0::server::::: Remediation No remediation found in references.
redhat enterprise linux desktop	3.0 4.0
CPE cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:::::::* cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:::::::* Remediation No remediation found in references.
redhat linux advanced workstation	2.1
CPE cpe:2.3:o:redhat:linux_advanced_workstation:2.1::ia64::::: cpe:2.3:o:redhat:linux_advanced_workstation:2.1::itanium::::: Remediation No remediation found in references.
openbsd openbsd	3.9 4.0
CPE cpe:2.3:o:openbsd:openbsd:3.9:::::::* cpe:2.3:o:openbsd:openbsd:4.0:::::::* Remediation No remediation found in references.
mandrakesoft mandrake linux	2007
CPE cpe:2.3:o:mandrakesoft:mandrake_linux:2007:::::::* cpe:2.3:o:mandrakesoft:mandrake_linux:2007::x86_64::::: Remediation No remediation found in references.
mandrakesoft mandrake linux corporate server	3.0 4.0
CPE cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:::::::* cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0::x86_64::::: cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0:::::::* cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:4.0::x86_64::::: Remediation No remediation found in references.
mandrakesoft mandrake multi network firewall	2.0
CPE cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:2.0:::::::* Remediation No remediation found in references.

Change History

10 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	[email protected]
Apr 23, 2026	Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 16, 2018	CVE Modified	[email protected]
Oct 11, 2017	CVE Modified	[email protected]
Jul 29, 2017	CVE Modified	[email protected]
Feb 19, 2017	CVE Modified	[email protected]
Dec 7, 2016	CVE Modified	[email protected]
Apr 9, 2007	Initial Analysis	[email protected]

CVE-2007-1351 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO