CVE-2002-1317

Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.

Affected products

Sun Solaris

xfree86 Project x11r6

= 3.3, 3.3.2, 3.3.3, 3.3.4, 3.3.5

Sgi Irix

= 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.10, 6.5.11, 6.5.12, 6.5.13

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

24.0% (98th percentile)

NVD status

Modified

Published

2004-09-01