CVE-2008-0006: Sun Solaris Libfont

High severity, CVSS 7.5. EPSS: 5.1% chance of exploitation in the next 30 days.

Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCF_BDF_ENCODINGS table.

Affected products

• Sun Solaris Libfont: any version
• Sun Solaris Libxfont: any version
• X.org Xserver: up to and including 1.4

Published 2008-01-18. Last modified 2026-06-16.