Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-1351

23
FAUCET Score

CVE-2007-1351 describes an integer overflow in the bdfReadCharacters function within X.Org libXfont and freetype 2.3.2 and earlier. This vulnerability allows remote authenticated attackers to execute arbitrary code via specially crafted BDF fonts, leading to a heap overflow. With a CVSS score of 8.5, it is considered highly severe, requiring authentication but having high impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
5.10CPE matchmatch criteria
cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:amd64:*:*:*:*:*
5.10CPE matchmatch criteria
cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:i386:*:*:*:*:*
5.10CPE matchmatch criteria
cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:powerpc:*:*:*:*:*
5.10CPE matchmatch criteria
cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:sparc:*:*:*:*:*
6.06_ltsCPE matchmatch criteria
cpe:2.3:o:ubuntu:ubuntu_linux:6.06_lts:*:amd64:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

8.5HIGH

AV:N/AC:M/Au:S/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Exploitability Score
6.8
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
5.59%
Probability of exploitation in next 30 days
EPSS Percentile
92.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0559 is in the 92nd percentile among its peer group of 1,162 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (7)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 2.1Fixed in: XFree86-0:4.1.0-82.EL
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: XFree86-0:4.3.0-120.EL
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: freetype-0:2.1.4-6.el3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: xorg-x11-0:6.8.2-1.EL.13.37.7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: freetype-0:2.1.9-5.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: libXfont-0:1.2.2-1.0.2.el5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: freetype-0:2.2.1-17.el5
View patch

Vendor Advisories (1)

redhatCVE-2007-1351Important

Multiple font integer overflows (CVE-2007-1352)

Apr 3, 2007

References

issues.foresightlinux.org / browse/FL-223
labs.idefense.com / intelligence/vulnerabilities/display.php
Patch
lists.apple.com / archives/Security-announce/2007/Nov/msg00003.html
lists.apple.com / archives/security-announce/2009/Feb/msg00000.html
lists.freedesktop.org / archives/xorg-announce/2007-April/000286.html
rhn.redhat.com / errata/RHSA-2007-0125.html
secunia.com / advisories/24741
Vendor Advisory
secunia.com / advisories/24745
secunia.com / advisories/24756
secunia.com / advisories/24758
secunia.com / advisories/24765
secunia.com / advisories/24768
secunia.com / advisories/24770
Vendor Advisory
secunia.com / advisories/24771
secunia.com / advisories/24772
secunia.com / advisories/24776
secunia.com / advisories/24791
secunia.com / advisories/24885
secunia.com / advisories/24889
secunia.com / advisories/24921
secunia.com / advisories/24996
secunia.com / advisories/25004
secunia.com / advisories/25006
secunia.com / advisories/25096
secunia.com / advisories/25195
secunia.com / advisories/25216
secunia.com / advisories/25305
secunia.com / advisories/25495
secunia.com / advisories/28333
secunia.com / advisories/30161
secunia.com / advisories/33937
security.gentoo.org / glsa/glsa-200705-02.xml
security.gentoo.org / glsa/glsa-200705-10.xml
exchange.xforce.ibmcloud.com / vulnerabilities/33417
issues.rpath.com / browse/RPL-1213
slackware.com / security/viewer.php
sourceforge.net / project/shownotes.php
sourceforge.net / project/shownotes.php
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11266
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1810
sunsolve.sun.com / search/document.do
support.apple.com / kb/HT3438
support.avaya.com / elmodocs2/security/ASA-2007-178.htm
support.avaya.com / elmodocs2/security/ASA-2007-193.htm
debian.org / security/2007/dsa-1294
debian.org / security/2008/dsa-1454
gentoo.org / security/en/glsa/glsa-200805-07.xml
mandriva.com / security/advisories
mandriva.com / security/advisories
mandriva.com / security/advisories
novell.com / linux/security/advisories/2007_27_x.html
novell.com / linux/security/advisories/2007_6_sr.html
openbsd.org / errata39.html
openbsd.org / errata40.html
redhat.com / support/errata/RHSA-2007-0126.html
redhat.com / support/errata/RHSA-2007-0132.html
redhat.com / support/errata/RHSA-2007-0150.html
securityfocus.com / archive/1/464686/100/0/threaded
securityfocus.com / archive/1/464816/100/0/threaded
securityfocus.com / bid/23283
Patch
securityfocus.com / bid/23300
securityfocus.com / bid/23402
securitytracker.com / id
trustix.org / errata/2007/0013
ubuntu.com / usn/usn-448-1
vupen.com / english/advisories/2007/1217
vupen.com / english/advisories/2007/1264
vupen.com / english/advisories/2007/1548