Description (CNA)
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided font parameters can result in an integer overflow, leading to the use of arbitrary kernel memory as glyph data. Unprivileged users may be able to access privileged kernel data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| FreeBSD / FreeBSD | affected All supported versions of FreeBSD. |
CWE
No CWE identifiers supplied.
References
- https://security.FreeBSD.org/advisories/FreeBSD-SA-18:04.vt.asc
- http://www.securityfocus.com/bid/103668
- http://www.securitytracker.com/id/1040629
ADP enrichment
No English description supplied.