CVE-2006-3740 Common Vulnerabilities and Exposures

Upstream information

CVE-2006-3740 at MITRE

Description

Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores
	National Vulnerability Database
Base Score	7.2
Vector	AV:L/AC:L/Au:N/C:C/I:C/A:C
Access Vector	Local
Access Complexity	Low
Authentication	None
Confidentiality Impact	Complete
Integrity Impact	Complete
Availability Impact	Complete

SUSE Bugzilla entries: 202367 [RESOLVED / FIXED], 243978 [RESOLVED / FIXED]

SUSE Security Advisories:

SUSE-SR:2006:023, published Wed, 27 Sep 2006 14:00:00 +0000

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 04:00:35 2013
CVE page last modified: Fri Dec 8 16:17:08 2023