CVE-2004-0084 - CVE House
Back to Database
Status published Critical CVE-2004-0084

Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to...

Vulnerability Description

Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0084

Credits & Attribution

No credits recorded in the NVD database.

References

More from xfree86 project

View All →
CVE-2005-2495
Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers...
Medium 5.1
CVE-2004-0106
Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to...
High 7.2
CVE-2004-0094
Integer signedness errors in XFree86 4.1.0 allow remote attackers to...
High 7.5
CVE-2004-0093
XFree86 4.1.0 allows remote attackers to cause a denial of...
High 7.5
CVE-2004-0083
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through...
Critical 10

Affected Vendor

xfree86 project

View all reports →

Affected Software

x11r6, openbsd
Vulnerable Versions:
4.1.0, 4.1.11, 4.1.12, 4.2.0, 4.2.1, 4.3.0, 3.3, 3.4

Timeline

Official Publish: February 14th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.