diff options
| author | Mike DePaulo <mikedep333@gmail.com> | 2015-02-08 22:08:09 -0500 |
|---|---|---|
| committer | Mike Gabriel <mike.gabriel@das-netzwerkteam.de> | 2015-02-14 16:14:31 +0100 |
| commit | c6aebf9284855a0e24ad9c5ffdd36aa65e16bec7 (patch) | |
| tree | 9a5c047718ac543a246622a476e75da5d013e176 /nxcompext | |
| parent | 2d724c1a0416895dd39bf33678f42cbb4c51b1ae (diff) | |
| download | nx-libs-c6aebf9284855a0e24ad9c5ffdd36aa65e16bec7.tar.gz nx-libs-c6aebf9284855a0e24ad9c5ffdd36aa65e16bec7.tar.bz2 nx-libs-c6aebf9284855a0e24ad9c5ffdd36aa65e16bec7.zip | |
CVE-2014-0210: unvalidated length fields in fs_read_query_info() from xorg/lib/libXfont commit 491291cabf78efdeec8f18b09e14726a9030cc8f
fs_read_query_info() parses a reply from the font server. The reply
contains embedded length fields, none of which are validated. This
can cause out of bound reads in either fs_read_query_info() or in
_fs_convert_props() which it calls to parse the fsPropInfo in the reply.
Diffstat (limited to 'nxcompext')
0 files changed, 0 insertions, 0 deletions