CVE-2014-0209
Estado: ModificadaMedia (4.6)—
Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata.
CVSS
- Versión: 2.0
- Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 4.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.44%
- Percentil entre todas las CVEs puntuadas: 36
- Fecha de la puntuación: 2/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-189
Referencias
- http://advisories.mageia.org/MGASA-2014-0278.html
- http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html
- http://lists.x.org/archives/xorg-announce/2014-May/002431.html
- http://rhn.redhat.com/errata/RHSA-2014-1893.html
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://secunia.com/advisories/59154
- http://www.debian.org/security/2014/dsa-2927
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:145
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/67382
- http://www.ubuntu.com/usn/USN-2211-1
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- http://advisories.mageia.org/MGASA-2014-0278.html
- http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html
- http://lists.x.org/archives/xorg-announce/2014-May/002431.html
- http://rhn.redhat.com/errata/RHSA-2014-1893.html
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://secunia.com/advisories/59154
- http://www.debian.org/security/2014/dsa-2927
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:145
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/67382
- http://www.ubuntu.com/usn/USN-2211-1
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
JSON original (NVD)
Mostrar
{
"id": "CVE-2014-0209",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.6,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2014-05-15T14:55:07.247",
"references": [
{
"url": "http://advisories.mageia.org/MGASA-2014-0278.html",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.x.org/archives/xorg-announce/2014-May/002431.html",
"tags": [
"Vendor Advisory"
],
"source": "secalert@redhat.com"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2014-1893.html",
"source": "secalert@redhat.com"
},
{
"url": "http://seclists.org/fulldisclosure/2014/Dec/23",
"source": "secalert@redhat.com"
},
{
"url": "http://secunia.com/advisories/59154",
"source": "secalert@redhat.com"
},
{
"url": "http://www.debian.org/security/2014/dsa-2927",
"source": "secalert@redhat.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:145",
"source": "secalert@redhat.com"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html",
"source": "secalert@redhat.com"
},
{
"url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded",
"source": "secalert@redhat.com"
},
{
"url": "http://www.securityfocus.com/bid/67382",
"source": "secalert@redhat.com"
},
{
"url": "http://www.ubuntu.com/usn/USN-2211-1",
"source": "secalert@redhat.com"
},
{
"url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
"source": "secalert@redhat.com"
},
{
"url": "http://advisories.mageia.org/MGASA-2014-0278.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2014-05/msg00073.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.x.org/archives/xorg-announce/2014-May/002431.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2014-1893.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://seclists.org/fulldisclosure/2014/Dec/23",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/59154",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2014/dsa-2927",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:145",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/67382",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ubuntu.com/usn/USN-2211-1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-189"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a directory with a large fonts.dir or fonts.alias file to the font path, which triggers a heap-based buffer overflow, related to metadata."
},
{
"lang": "es",
"value": "Múltiples desbordamientos de enteros en las funciones (1) FontFileAddEntry y (2) lexAlias en X.Org libXfont anterior a 1.4.8 y 1.4.9x anterior a 1.4.99.901 podrían permitir a usuarios locales ganar privilegios mediante la adición de un directorio con un archivo fonts.dir o fonts.alias largo a la ruta de la fuente, lo que provoca un desbordamiento de buffer basado en memoria dinámica, relacionado con metadatos."
}
],
"lastModified": "2026-06-17T00:02:31.300",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:x:libxfont:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60D58307-30CB-4A71-99EA-8C42329AFFA7",
"versionEndIncluding": "1.4.7"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1437F3D-127E-45E7-B678-85BF208BAD30"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26743145-32B4-45A6-8912-2B97EF59B677"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C18E74E-DB01-4D5F-BD18-DE370BA56A38"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06DBC61A-10CD-41ED-AC1B-16C867823059"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "061E16E4-0DD2-45B0-927D-5E6D97D54D9A"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58F3B17A-D8A9-4581-8EAC-4D6498A23F4D"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.2.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D064C118-DC51-46CF-961E-3D70C1EEFC92"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9F45C46-F416-46FC-8C98-79D57BB397D6"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B21FE78A-41E1-46A7-8129-94CBA34A3FA5"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5ADFF46D-9680-410C-B8B8-79F629534465"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D36FBB2E-7BCD-4212-AE04-8C7C6B57CD49"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A603E28-7D58-44FB-819E-5F22FA9860EE"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D9EE6A0-89DC-464D-890F-2C0E5CDCFAA4"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B056FDAB-4B10-4B32-A942-84864D39CBD6"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "642C350E-C81B-46F7-84B4-D3DE45E70DC4"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5FC93A4-0138-4293-9C02-504469223399"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53524431-385B-4FF5-8C5E-4B708099096D"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "375B1A11-E0B4-424D-926B-AF3AED0A7D0B"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8470304F-5C5A-4260-BEAB-E7F6F81015BB"
},
{
"criteria": "cpe:2.3:a:x:libxfont:1.4.99:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EB8EE57-7DE8-4D1D-A227-F9B6510E1E09"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7118F616-25CA-4E34-AA13-4D14BB62419F"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5D324C4-97C7-49D3-A809-9EAD4B690C69"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2076871-2E80-4605-A470-A41C1A8EC7EE"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F61F047-129C-41A6-8A27-FFCBB8563E91"
},
{
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert@redhat.com"
}