CVE-2004-0084
XFree86 4.1.0-4.3.0 - Authenticated Buffer Overflow via Malformed Font Alias File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-0084. PoCs published by Greg MacManus.
AI-analyzed exploit summary This exploit leverages a local buffer overflow in XFree86's font.alias file parsing to potentially gain root privileges. It creates a malicious fonts.alias file with a long string to trigger the overflow when the X server processes it.
Description
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.
Exploits (1)
This exploit leverages a local buffer overflow in XFree86's font.alias file parsing to potentially gain root privileges. It creates a malicious fonts.alias file with a long string to trigger the overflow when the X server processes it.