A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties() before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server.
1:2.0.1-3~ubuntu16.04.11:2.0.1-3~ubuntu16.04.21:2.0.1-3~ubuntu16.04.31:2.0.5-1ubuntu0.21:2.0.6-1+deb13u1build0.24.04.21:2.0.6-1build11:2.0.6-2ubuntu0.21:1.4.7-1ubuntu0.4+esm21:1.5.1-1ubuntu0.16.04.4+esm21:2.0.3-1ubuntu0.1~esm21:2.0.3-1ubuntu0.20.04.1~esm2Exploitability
AV:NAC:HPR:LUI:NScope
S:CImpact
C:HI:HA:HCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H