oval:org.mitre.oval:def:831

Definition Id: oval:org.mitre.oval:def:831

Oval ID:	oval:org.mitre.oval:def:831
Title:	XFree86 Buffer Overflow in CopyISOLatin1Lowered Function
Description:	Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-0084	Version:	2
Platform(s):	Red Hat Enterprise Linux 3	Product(s):	XFree86
Definition Synopsis:
Software section Red Hat Enterprise 3 is installed AND ix86 architecture AND XFree86 version is less than 4.3.0-55.EL AND Configuration section /usr/X11R6/bin/XFree86 is SUID and executable /usr/X11R6/bin/XFree86 is SUID and executable AND /usr/X11R6/bin/XFree86 is SUID and executable /usr/X11R6/bin/XFree86 is SUID and executable AND /usr/X11R6/bin/XFree86 is SUID and executable