Skip to content
OpenAdvisories
Unscored DSA-360 2 CVEs

xfstt - several vulnerabilities

Published Aug 1, 2003 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 3.0 xfstt 1.2.1-3

Vulnerabilities 2

  • Unscored —

    X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute a…

  • Unscored —
    CVE-2003-0625 Public exploit

    Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malfor…