CVE-2006-3740 in XFree86 X信息

摘要

由 MITRE

Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2006-07-20

披露

2006-09-12

管理

已接受

条目

VDB-32233

CPE

准备好

CWE

CWE-192 (已确认)

CVSS

9.3 (VulDB)

EPSS

0.00503

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2006-3740
NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-3740
CVE Details	https://www.cvedetails.com/cve/CVE-2006-3740/

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!