CVE-2006-3739

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-13 · updated 2026-06-16

Description

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics (AFM) files with a modified number of character metrics (StartCharMetrics), which leads to a heap-based buffer overflow.

Affected products

X.Org: 6.8.2
Xfree86 Project Xfree86 X: all versions

References

http://secunia.com/advisories/21864
http://secunia.com/advisories/21889
http://secunia.com/advisories/21890
http://secunia.com/advisories/21894
http://secunia.com/advisories/21900
http://secunia.com/advisories/21904
http://secunia.com/advisories/21908
http://secunia.com/advisories/21924
http://secunia.com/advisories/22080
http://secunia.com/advisories/22141
http://secunia.com/advisories/22332
http://secunia.com/advisories/22560

Get alerted when CVE-2006-3739 or the next vulnerability affects your stack