X.org X Font Server vulnerabilities

2 CVEs affecting X.org X Font Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-4990, published 2007-10-05.

More from X.org.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-4990, published 2007-10-05. High severity, CVSS 7.5. EPSS: 10.7% chance of exploitation in the next 30 days. The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with…
• CVE-2007-4568, published 2007-10-05. Medium severity, CVSS 6.8. EPSS: 4% chance of exploitation in the next 30 days. Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents…