CVE ID:	CVE-2013-6462
Description:	Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.
Test IDs:	1.3.6.1.4.1.25623.1.0.881860   1.3.6.1.4.1.25623.1.0.702838   1.3.6.1.4.1.25623.1.0.841682   1.3.6.1.4.1.25623.1.1.13.2014.013.01   1.3.6.1.4.1.25623.1.0.867264   1.3.6.1.4.1.25623.1.0.120003   1.3.6.1.4.1.25623.1.0.871112   1.3.6.1.4.1.25623.1.0.881859   1.3.6.1.4.1.25623.1.0.123485   1.3.6.1.4.1.25623.1.0.867256   1.3.6.1.4.1.25623.1.1.4.2014.0219.1   1.3.6.1.4.1.25623.1.1.10.2014.0020
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6462 BugTraq ID: 64694 http://www.securityfocus.com/bid/64694 Debian Security Information: DSA-2838 (Google Search) http://www.debian.org/security/2014/dsa-2838 http://seclists.org/oss-sec/2014/q1/33 http://lists.x.org/archives/xorg-announce/2014-January/002389.html http://osvdb.org/101842 RedHat Security Advisories: RHSA-2014:0018 http://rhn.redhat.com/errata/RHSA-2014-0018.html http://secunia.com/advisories/56240 http://secunia.com/advisories/56336 http://secunia.com/advisories/56357 http://secunia.com/advisories/56371 SuSE Security Announcement: openSUSE-SU-2014:0073 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00050.html SuSE Security Announcement: openSUSE-SU-2014:0075 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-01/msg00052.html http://www.ubuntu.com/usn/USN-2078-1 XForce ISS Database: libxfont-cve20136462-bo(90123) https://exchange.xforce.ibmcloud.com/vulnerabilities/90123