CVE Feed

    Dashboard / CVE / CVE-2001-0955

    CVE-2001-0955

    Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a large number of characters, possibly through the web page search form of KDE Konqueror or from an xterm command with a long title.

    Published:Sep 22, 2001
    Last Modified:Apr 16, 2026
    EPS:Feb 2, 2002
    EPSS Score:0.0008
    CVSS Score:7.2

    Affected Products

    Vendor
    Xfree86 Project
    Product
    X11r6

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2007-1351 (CVSS 8.5) — Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) …
    CVE-2005-0605 (CVSS 7.5) — scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to…
    CVE-2004-0687 (CVSS 7.5) — Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and…
    CVE-2004-0688 (CVSS 7.5) — Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) …
    CVE-2004-0914 (CVSS 10) — Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) m…
    CVE-2004-0094 (CVSS 7.5) — Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly ex…
    CVE-2004-0093 (CVSS 7.5) — XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an …
    CVE-2004-0106 (CVSS 7.2) — Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a diff…
    CVE-2004-0084 (CVSS 10) — Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered f…
    CVE-2004-0083 (CVSS 10) — Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote a…

    References

    http://cvsweb.xfree86.org/cvsweb/xc/programs/Xserver/fb/fbglyph.c
    http://marc.info/?l=bugtraq&m=100776624224549&w=2
    http://marc.info/?l=bugtraq&m=100784290015880&w=2
    http://marc.info/?l=vuln-dev&m=100118958310463&w=2
    http://www.securityfocus.com/bid/3657
    http://www.securityfocus.com/bid/3663
    http://www.xfree86.org/4.2.0/RELNOTES2.html#2
    http://www.xfree86.org/security/
    https://exchange.xforce.ibmcloud.com/vulnerabilities/7673
    https://exchange.xforce.ibmcloud.com/vulnerabilities/7683
    http://cvsweb.xfree86.org/cvsweb/xc/programs/Xserver/fb/fbglyph.c
    http://marc.info/?l=bugtraq&m=100776624224549&w=2
    http://marc.info/?l=bugtraq&m=100784290015880&w=2
    http://marc.info/?l=vuln-dev&m=100118958310463&w=2
    http://www.securityfocus.com/bid/3657
    http://www.securityfocus.com/bid/3663
    http://www.xfree86.org/4.2.0/RELNOTES2.html#2
    http://www.xfree86.org/security/
    https://exchange.xforce.ibmcloud.com/vulnerabilities/7673
    https://exchange.xforce.ibmcloud.com/vulnerabilities/7683

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High