CVE-2002-1317

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 24.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-12-11 · updated 2026-06-16

Description

Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.

Affected products

Hewlett Packard Enterprise (HPE) HP-UX: 10.10, 10.20, 10.24, 11.00, 11.04, 11.11 (+1)
Sgi Irix: 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5 (+8)
Sun Solaris: 2.5.1, 2.6, 7.0, 8.0, 9.0, 9.0-x86_update_2
Sunos: 5.5.1, 5.7, 5.8
Xfree86 Project X11R6: 3.3, 3.3.2, 3.3.3, 3.3.4, 3.3.5

References

http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21541
http://marc.info/?l=bugtraq&m=103825150527843&w=2
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/48879
http://www.cert.org/advisories/CA-2002-34.html
http://www.ciac.org/ciac/bulletins/n-024.shtml
http://www.iss.net/security_center/static/10375.php
http://www.kb.cert.org/vuls/id/312313
http://www.securityfocus.com/advisories/4988
http://www.securityfocus.com/bid/6241
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A149
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A152

Get alerted when CVE-2002-1317 or the next vulnerability affects your stack