VULNERABILITY INTELLIGENCE
CVE-2007-4568
CVSS score6.8 MEDIUM
EPSS probability3.98%
CISA KEVNot currently listed
Published2007-10-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer