Buffer Over-read Vulnerability in libXfont Affects X.org Products
CVE-2017-13720

7.1HIGH

Key Information:

Vendor: X.org
Status: Libxfont
Vendor: CVE Published:; 11 October 2017

What is CVE-2017-13720?

A buffer over-read vulnerability exists in the PatternMatch function of libXfont, affecting versions 1.5.2 and 2.x prior to 2.0.2. This flaw allows an attacker with access to an X connection to exploit the vulnerability during font pattern matching. The '0' characters are incorrectly managed, especially in scenarios where '?' characters are involved, potentially leading to information disclosure or causing the application to crash, thereby resulting in denial of service.