CVE-2007-1351: mandrakesoft mandrake_multi_network_firewall Numeric Errors

CVSS: 8.5v2.0HighModified

AliasesRHSA-2007:0150DEBIAN-CVE-2007-1351DSA-1454-1

Published 06-04-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-1351 is a high (CVSS 8.5) Numeric Errors vulnerability in mandrakesoft mandrake_multi_network_firewall. EPSS estimates a 5.59% chance of exploitation in the next 30 days, higher than 92.7% of scored vulnerabilities.

Overall risk

35/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.5/10

010

High · v2.0 (NVD)

EPSS score

5.59%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5 · Related 1

DSA-1294-1 OPENSUSE-SU-2024:10770-1 RHSA-2007:0125 RHSA-2007:0126 RHSA-2007:0132

Timeline

06-04-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.

CVSS metrics

1 score · 1 source · 1 version

v2.08.5

EPSS trend

Probability

5.59%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 5.59% on 18-09-2026

18-09-202618-10-2026

EPSS score

5.59%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Redhat8 products

enterprise_linuxEOL2.1 | 3.0 | 4.0 | 5.0
enterprise_linux_desktop3.0 | 4.0
linux_advanced_workstation2.1
freetype< 0:2.1.4-6.el3 | < 0:2.1.9-5.el4 | < 0:2.2.1-17.el5
freetype-debuginfo< 0:2.1.4-6.el3 | < 0:2.1.9-5.el4 | < 0:2.2.1-17.el5

Show all 8

Debian2 products

freetype< 2.3.5-1 | < 2.2.1-5+etch2
libxfont< 1:1.2.2-2

Mandrakesoft1 product

mandrake_multi_network_firewall2.0

Openbsd1 product

openbsdEOL3.9 | 4.0

Rpath1 product

rpath_linux1

Ubuntu1 product

ubuntu_linux5.10 | 6.06_lts | 6.10

X.org1 product

libxfont1.2.2

Xfree86_project1 product

x11r64.3.0 | 4.3.0.1 | 4.3.0.2

8 vendors · 16 products

References

77 links

www.redhat.com/support/errata/RHSA-2007-0150.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/24745Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24921Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/33937Third Party AdvisoryX Refsource SECUNIA
www.trustix.org/errata/2007/0013/Vendor AdvisoryX Refsource TRUSTIX
secunia.com/advisories/24771Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200705-02.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/24889Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24770Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 77 references

secunia.com/advisories/25006Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24756Third Party AdvisoryX Refsource SECUNIA
sourceforge.net/project/shownotes.php?group_id=3157&release_id=498954X Refsource CONFIRM
secunia.com/advisories/25495Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24996Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/23283VDB EntryX Refsource BIDPatch
www.redhat.com/support/errata/RHSA-2007-0126.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/bid/23300VDB EntryX Refsource BID
support.apple.com/kb/HT3438X Refsource CONFIRM
security.gentoo.org/glsa/glsa-200705-10.xmlVendor AdvisoryX Refsource GENTOO
www.ubuntu.com/usn/usn-448-1Vendor AdvisoryX Refsource UBUNTU
lists.apple.com/archives/security-announce/2009/Feb/msg00000.htmlVendor AdvisoryX Refsource APPLE
www.mandriva.com/security/advisories?name=MDKSA-2007:080Vendor AdvisoryX Refsource MANDRIVA
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.626733Vendor AdvisoryX Refsource SLACKWARE
www.novell.com/linux/security/advisories/2007_6_sr.htmlVendor AdvisoryX Refsource SUSE
www.mandriva.com/security/advisories?name=MDKSA-2007:081Vendor AdvisoryX Refsource MANDRIVA
www.debian.org/security/2008/dsa-1454Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/24758Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/1264VDB EntryX Refsource VUPEN
www.securitytracker.com/id?1017857VDB EntryX Refsource SECTRACK
secunia.com/advisories/24885Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2007-178.htmX Refsource CONFIRM
secunia.com/advisories/25096Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25195Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2007-0125.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/24741Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.apple.com/archives/Security-announce/2007/Nov/msg00003.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/24776Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28333Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24768Third Party AdvisoryX Refsource SECUNIA
lists.freedesktop.org/archives/xorg-announce/2007-April/000286.htmlMailing ListX Refsource MLIST
secunia.com/advisories/24791Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2007_27_x.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/30161Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200805-07.xmlVendor AdvisoryX Refsource GENTOO
sourceforge.net/project/shownotes.php?release_id=498954X Refsource CONFIRM
www.debian.org/security/2007/dsa-1294Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/24765Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25216Third Party AdvisoryX Refsource SECUNIA
labs.idefense.com/intelligence/vulnerabilities/display.php?id=501Third Party AdvisoryX Refsource IDEFENSEPatch
www.securityfocus.com/archive/1/464686/100/0/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/464816/100/0/threadedMailing ListX Refsource BUGTRAQ
www.vupen.com/english/advisories/2007/1548VDB EntryX Refsource VUPEN
exchange.xforce.ibmcloud.com/vulnerabilities/33417VDB EntryX Refsource XF
sunsolve.sun.com/search/document.do?assetkey=1-26-102886-1Vendor AdvisoryX Refsource SUNALERT
www.vupen.com/english/advisories/2007/1217VDB EntryX Refsource VUPEN
www.openbsd.org/errata40.htmlVendor AdvisoryX Refsource OPENBSD
issues.rpath.com/browse/RPL-1213X Refsource CONFIRM
www.securityfocus.com/bid/23402VDB EntryX Refsource BID
secunia.com/advisories/25004Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25305Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266VDB EntrySignatureX Refsource OVAL
www.redhat.com/support/errata/RHSA-2007-0132.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/24772Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2007-193.htmX Refsource CONFIRM
www.openbsd.org/errata39.htmlVendor AdvisoryX Refsource OPENBSD
issues.foresightlinux.org/browse/FL-223X Refsource CONFIRM
www.mandriva.com/security/advisories?name=MDKSA-2007:079Vendor AdvisoryX Refsource MANDRIVA
access.redhat.com/errata/RHSA-2007:0150Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=234228REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0150.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-1351REPORT
bugzilla.redhat.com/show_bug.cgi?id=235265REPORT
www.cve.org/CVERecord?id=CVE-2007-1351Advisory
nvd.nist.gov/vuln/detail/CVE-2007-1351Advisory
security-tracker.debian.org/tracker/CVE-2007-1351Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities