CVE-2007-1351: Mandrakesoft Mandrake Multi Network Firewall

High severity, CVSS 8.5. EPSS: 5.6% chance of exploitation in the next 30 days.

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.

Affected products

• Mandrakesoft Mandrake Multi Network Firewall: version 2.0 only
• OpenBSD OpenBSD: version 3.9 only; version 4.0 only
• Red Hat Enterprise Linux: version 2.1 only; version 3.0 only; version 4.0 only; version 5.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only; version 4.0 only
• Red Hat Linux Advanced Workstation: version 2.1 only
• Rpath Rpath Linux: version 1 only
• Ubuntu Ubuntu Linux: version 5.10 only; version 6.06_lts only; version 6.10 only
• X.org Libxfont: version 1.2.2 only
• XFREE86 Project x11r6: version 4.3.0 only; version 4.3.0.1 only; version 4.3.0.2 only

Published 2007-04-06. Last modified 2026-06-16.