Web Browser 로는 FTP 접속이 불가능 합니다.

문서번호 : 1158328481
업데이트 : 2006.09.15


상세내용

CVE-2006-3739 :
Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server
allows local users to execute arbitrary code via crafted Adobe Font Metrics
(AFM) files with a modified number of character metrics (StartCharMetrics),
which leads to a heap-based buffer overflow.

CVE-2006-3739 :
Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X
server allows local users to execute arbitrary code via crafted (1) CMap
and (2) CIDFont font data with modified item counts in the (a) begincodespacerange,
(b) cidrange, and (c) notdefrange sections.


Autoupdates 지원 : 지원


update 패키지

  RPMS :

    . XFree86-libs-4.1.0-77.i686.rpm
    . XFree86-devel-4.1.0-77.i686.rpm
    . XFree86-4.1.0-77.i686.rpm
    . XFree86-xfs-4.1.0-77.i686.rpm

  SRPMS :

    . XFree86-4.1.0-77.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3739
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3740