CVE-2006-3740

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-13 · updated 2026-06-16

Description

Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.

Affected products

X.Org: 6.8.2
Xfree86 Project Xfree86 X: all versions

References

http://secunia.com/advisories/21864
http://secunia.com/advisories/21889
http://secunia.com/advisories/21890
http://secunia.com/advisories/21894
http://secunia.com/advisories/21900
http://secunia.com/advisories/21904
http://secunia.com/advisories/21908
http://secunia.com/advisories/21924
http://secunia.com/advisories/22080
http://secunia.com/advisories/22141
http://secunia.com/advisories/22332
http://secunia.com/advisories/22560

Get alerted when CVE-2006-3740 or the next vulnerability affects your stack