Back to Database
Status published
High
CVE-2002-1317
Buffer overflow in Dispatch() routine for XFS font server (fs.auto)...
Vulnerability Description
Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-1317
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/advisories/4988
- http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/48879
- http://marc.info/?l=bugtraq&m=103825150527843&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A149
- http://www.cert.org/advisories/CA-2002-34.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A152
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2816
- http://www.kb.cert.org/vuls/id/312313
- http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21541
- http://www.iss.net/security_center/static/10375.php
- ftp://patches.sgi.com/support/free/security/advisories/20021202-01-I
- http://www.securityfocus.com/bid/6241
- http://www.ciac.org/ciac/bulletins/n-024.shtml
More from xfree86 project
View All →CVE-2005-2495
Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers...
Medium
5.1
CVE-2004-0106
Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to...
High
7.2
CVE-2004-0094
Integer signedness errors in XFree86 4.1.0 allow remote attackers to...
High
7.5
CVE-2004-0093
XFree86 4.1.0 allows remote attackers to cause a denial of...
High
7.5
CVE-2004-0084
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to...
Critical
10
Affected Vendor
xfree86 project
View all reports →Affected Software
x11r6, irix, hp-ux, solaris, sunos
Vulnerable Versions:
3.3, 3.3.2, 3.3.3, 3.3.4, 3.3.5, 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.10, 6.5.11, 6.5.12, 6.5.13, 10.10, 10.20, 10.24, 11.00, 11.04, 11.11, 11.22, 2.5.1, 2.6, 7.0, 8.0, 9.0, 5.5.1, 5.7, 5.8
Timeline
Official Publish:
September 1st, 2004
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.