Ubuntu: 2078-1 Moderate: libXfont Buffer Overflow Issue Overview

ubuntu

January 7, 2014

libXfont could be made to crash or run programs as an administrator if it opened a specially crafted font file.

Summary

libXfont could be made to crash or run programs as an administrator if it

opened a specially crafted font file.

Software Description:

- libxfont: X11 font rasterisation library

Details:

It was discovered that libXfont incorrectly handled certain malformed BDF

fonts. An attacker could use a specially crafted font file to cause

libXfont to crash, or possibly execute arbitrary code in order to gain

privileges. The default compiler options for affected releases should

reduce the vulnerability to a denial of service.

Topics Covered

security advisory moderate denial of service buffer overflow privilege escalation Ubuntu libXfont

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  libxfont1                       1:1.4.6-1ubuntu0.1

Ubuntu 13.04:
  libxfont1                       1:1.4.5-2ubuntu0.13.04.1

Ubuntu 12.10:
  libxfont1                       1:1.4.5-2ubuntu0.12.10.1

Ubuntu 12.04 LTS:
  libxfont1                       1:1.4.4-1ubuntu0.1

Ubuntu 10.04 LTS:
  libxfont1                       1:1.4.1-1ubuntu0.2

After a standard system update you need to reboot your computer to make
all the necessary changes.