Mandriva, Inc. Information for VU#820006

XFree86 vulnerable to buffer overflow via crafted font directory in 'fonts.alias' file

Status

Affected

Vendor Statement

MDKSA-2004:012 fixes both of these vulnerabilities.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Vendor References

None

Addendum

The MDKSA-2004:012 advisory refers to both this vulnerability and VU#667502

If you have feedback, comments, or additional information about this vulnerability, please send us email.