CVE:CVE-2007-1352
CNNVD:CNNVD-200704-099
X.Org是X.Org基金会运作的一个对X Window系统的官方参考实现，是开源的自由软件。
X.Org的LibXFont库在解析BDF字体时存在整数溢出，允许攻击者通过特制的BDF字体导致堆溢出。此外LibXFont库在解析fonts.dir字体信息文件时也存在整数溢出，如果特制的字体信息在第一行指定了多于1,073,741,824(2的30次方)个的单元数的话，就可能触发堆溢出，导致执行任意指令。
solution:Upgrade mandrakesoft mandrake_multi_network_firewall to a higher version than 2.0,and avoid the version 2.0; Upgrade x.org libxfont to a higher version than 1.2.2,and avoid the version 1.2.2; Upgrade redhat enterprise_linux to a higher version than 2.1,3.0,4.0,and avoid the version 2.1,3.0,4.0; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,4.0,5.0,and avoid the version 3.0,4.0,5.0; Upgrade redhat fedora_core to a higher version than core_1.0,and avoid the version core_1.0; Upgrade redhat linux to a higher version than 9.0,and avoid the version 9.0; Upgrade redhat linux_advanced_workstation to a higher version than 2.1,and avoid the version 2.1; Upgrade slackware slackware_linux to a higher version than 9.0,9.1,current,and avoid the version 9.0,9.1,current; Upgrade turbolinux turbolinux_desktop to a higher version than 10.0,and avoid the version 10.0; Upgrade ubuntu ubuntu_linux to a higher version than 4.1,5.10,6.06_lts,6.10,and avoid the version 4.1,5.10,6.06_lts,6.10; Upgrade rpath linux to a higher version than 1,and avoid the version 1; Upgrade openbsd openbsd to a higher version than 3.9,4.0,and avoid the version 3.9,4.0