DEBIAN-CVE-2006-3740

DEBIAN-CVE-2006-3740 PUBLISHED CVSS 8.600000381469727 HIGH

Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.

Risk Scores

CVSS 4.0

8.600000381469727

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Debian:13	libxfont	0, 0, 0
Debian:11	libxfont	0, 0, 0
Debian:12	libxfont	0, 0, 0
Debian:14	libxfont	0, 0, 0

Timeline

Sep 13, 2006 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2006-3740 advisory

Open in Interactive Console →