CVE-2013-6462
NoneCVSS
—
EPSS
10.3%
Published
Jan 9, 2014
CISA due date
—
The record
Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | libxfont | 0 | 1:1.4.7-1 |
| Debian:12 | libxfont | 0 | 1:1.4.7-1 |
| Debian:13 | libxfont | 0 | 1:1.4.7-1 |
| Debian:6.0 | libxfont | 0 | 1:1.4.1-4 |
| Debian:7 | libxfont | 0 | 1:1.4.5-3 |
| Mageia:3 | libxfont | 0 | 1.4.5-3.1.mga3 |
| Red Hat:enterprise_linux:5::client | libXfont | 0 | 0:1.2.2-1.0.5.el5_10 |
| Red Hat:enterprise_linux:5::client | libXfont-debuginfo | 0 | 0:1.2.2-1.0.5.el5_10 |
| Red Hat:enterprise_linux:5::client | libXfont-devel | 0 | 0:1.2.2-1.0.5.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | libXfont | 0 | 0:1.2.2-1.0.5.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | libXfont-debuginfo | 0 | 0:1.2.2-1.0.5.el5_10 |
| Red Hat:enterprise_linux:5::client_workstation | libXfont-devel | 0 | 0:1.2.2-1.0.5.el5_10 |
| Red Hat:enterprise_linux:5::server | libXfont | 0 | 0:1.2.2-1.0.5.el5_10 |
| Red Hat:enterprise_linux:5::server | libXfont-debuginfo | 0 | 0:1.2.2-1.0.5.el5_10 |
| Red Hat:enterprise_linux:5::server | libXfont-devel | 0 | 0:1.2.2-1.0.5.el5_10 |
| Red Hat:enterprise_linux:6::client | libXfont | 0 | 0:1.4.5-3.el6_5 |
| Red Hat:enterprise_linux:6::client | libXfont-debuginfo | 0 | 0:1.4.5-3.el6_5 |
| Red Hat:enterprise_linux:6::client | libXfont-devel | 0 | 0:1.4.5-3.el6_5 |
| Red Hat:enterprise_linux:6::computenode | libXfont | 0 | 0:1.4.5-3.el6_5 |
| Red Hat:enterprise_linux:6::computenode | libXfont-debuginfo | 0 | 0:1.4.5-3.el6_5 |
| Red Hat:enterprise_linux:6::computenode | libXfont-devel | 0 | 0:1.4.5-3.el6_5 |
| Red Hat:enterprise_linux:6::server | libXfont | 0 | 0:1.4.5-3.el6_5 |
| Red Hat:enterprise_linux:6::server | libXfont-debuginfo | 0 | 0:1.4.5-3.el6_5 |
| Red Hat:enterprise_linux:6::server | libXfont-devel | 0 | 0:1.4.5-3.el6_5 |
| Red Hat:enterprise_linux:6::workstation | libXfont | 0 | 0:1.4.5-3.el6_5 |
| Red Hat:enterprise_linux:6::workstation | libXfont-debuginfo | 0 | 0:1.4.5-3.el6_5 |
| Red Hat:enterprise_linux:6::workstation | libXfont-devel | 0 | 0:1.4.5-3.el6_5 |
Related vulnerabilities
- CVE-2017-16611 In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open (but not… Also affects libxfont
- CVE-2017-13720 In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x… Also affects libxfont
- CVE-2015-1802 The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and… Also affects libxfont
- CVE-2014-0209 Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in… Also affects libxfont
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90804 A vulnerability was detected in GNU Binutils 2.47. CWE-119