CVE ID:	CVE-2006-3740
Description:	Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.
Test IDs:	1.3.6.1.4.1.25623.1.0.58696
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3740 BugTraq ID: 19974 http://www.securityfocus.com/bid/19974 Bugtraq: 20060912 rPSA-2006-0167-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (Google Search) http://www.securityfocus.com/archive/1/445812/100/0/threaded Bugtraq: 20070330 VMSA-2007-0002 VMware ESX security updates (Google Search) http://www.securityfocus.com/archive/1/464268/100/0/threaded Debian Security Information: DSA-1193 (Google Search) http://www.debian.org/security/2006/dsa-1193 http://security.gentoo.org/glsa/glsa-200609-07.xml http://www.idefense.com/intelligence/vulnerabilities/display.php?id=411 http://www.mandriva.com/security/advisories?name=MDKSA-2006:164 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9454 RedHat Security Advisories: RHSA-2006:0665 http://www.redhat.com/support/errata/RHSA-2006-0665.html RedHat Security Advisories: RHSA-2006:0666 http://www.redhat.com/support/errata/RHSA-2006-0666.html http://securitytracker.com/id?1016828 http://secunia.com/advisories/21864 http://secunia.com/advisories/21889 http://secunia.com/advisories/21890 http://secunia.com/advisories/21894 http://secunia.com/advisories/21900 http://secunia.com/advisories/21904 http://secunia.com/advisories/21908 http://secunia.com/advisories/21924 http://secunia.com/advisories/22080 http://secunia.com/advisories/22141 http://secunia.com/advisories/22332 http://secunia.com/advisories/22560 http://secunia.com/advisories/23033 http://secunia.com/advisories/23899 http://secunia.com/advisories/23907 http://secunia.com/advisories/24636 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102780-1 SuSE Security Announcement: SUSE-SR:2006:023 (Google Search) http://www.novell.com/linux/security/advisories/2006_23_sr.html http://www.ubuntu.com/usn/usn-344-1 http://www.vupen.com/english/advisories/2006/3581 http://www.vupen.com/english/advisories/2006/3582 http://www.vupen.com/english/advisories/2007/0322 http://www.vupen.com/english/advisories/2007/1171 XForce ISS Database: xorg-server-scancidfont-overflow(28890) https://exchange.xforce.ibmcloud.com/vulnerabilities/28890