CVE-2004-0083: OpenBSD

High severity, CVSS 10.0. EPSS: 21.2% chance of exploitation in the next 30 days.

Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.

Affected products

• OpenBSD OpenBSD: version 3.3 only; version 3.4 only
• XFREE86 Project x11r6: version 4.1.0 only; version 4.1.11 only; version 4.1.12 only; version 4.2.0 only; version 4.2.1 only; version 4.3.0 only

Published 2004-03-03. Last modified 2026-06-16.