CVE-2004-0084: openbsd
Vulnerability summary
CVE-2004-0084 is a high (CVSS 10.0) vulnerability in openbsd. EPSS estimates a 24.86% chance of exploitation in the next 30 days, higher than 97.8% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 14-02-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
24.86%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 24.86% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (securityfocus.com)
Maturity: unknown
XFree86 4.x - CopyISOLatin1Lowered Font_Name Buffer Overflow
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Openbsd1 product
- openbsdEOL3.3 | 3.4
Xfree86_project1 product
- x11r64.1.0 | 4.1.11 | 4.1.12 | 4.2.0 | 4.2.1 | 4.3.0
2 vendors · 2 products
References
18 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A831VDB EntrySignatureX Refsource OVAL
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A807VDB EntrySignatureX Refsource OVAL
Show all 18 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10405VDB EntrySignatureX Refsource OVAL
- www.idefense.com/application/poi/display?id=73X Refsource MISC
- www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053Vendor AdvisoryX Refsource SLACKWARE