CVE-2004-0083
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users...
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
Exploit likelihood
What each source reports
NVD Score used
10.0
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
- Record
CVE-2004-0083- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
- Record
CVE-2004-0083- Updated
- 2026-11-02
EUVDEUVD-2004-0083 No score
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
- Record
EUVD-2004-0083- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-275v-77j5-j2rj No score
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users...
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
- Record
GHSA-275v-77j5-j2rj- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xfree86Debian:3.0 |
before 4.1.0-16woody3 | 4.1.0-16woody3 |
XFree86Red Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
Show 107 moreShow less
| Package | Affected | Fixed |
|---|---|---|
XFree86-ISO8859-9-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLURed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XnestRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XvfbRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-base-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-cyrillic-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-develRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-docRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-font-utilsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libs-dataRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-syriac-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-toolsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-truetype-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-twmRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xauthRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xdmRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xfsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86Red Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLURed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XnestRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XvfbRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-base-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-cyrillic-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-develRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-docRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-font-utilsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libs-dataRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-syriac-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-toolsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-truetype-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-twmRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xauthRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xdmRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xfsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86Red Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLURed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XnestRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XvfbRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-base-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-cyrillic-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-develRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-docRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-font-utilsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libs-dataRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-syriac-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-toolsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-truetype-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-twmRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xauthRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xdmRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xfsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86Red Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLURed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XnestRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XvfbRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-base-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-cyrillic-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-develRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-docRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-font-utilsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libs-dataRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-syriac-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-toolsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-truetype-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-twmRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xauthRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xdmRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xfsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | XFree86 4.3 - Font Information File Buffer Overflow | 2004-11-10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0083 is a high vulnerability (CVSS 10.0) in Openbsd, published February 14, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 21.2%, the 97th percentile. Fixed in xfree86 4.1.0-16woody3.
References
novell.com/linux/security/advisories/2004_06_xf86.html
redhat.com/support/errata/RHSA-2004-060.html
exchange.xforce.ibmcloud.com/vulnerabilities/15130
sunsolve.sun.com/search/document.do?assetkey=1-26-57768-1
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000821
idefense.com/application/poi/display?id=72
Show 33 moreShow less
securityfocus.com/bid/9636
security.gentoo.org/glsa/glsa-200402-02.xml
marc.info?l=bugtraq&m=107644835523678&w=2
marc.info?l=bugtraq&m=110979666528890&w=2
debian.org/security/2004/dsa-443
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A806
mandriva.com/security/advisories?name=MDKSA-2004:012
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A830
redhat.com/support/errata/RHSA-2004-059.html
xfree86.org/cvs/changes
kb.cert.org/vuls/id/820006
marc.info?l=bugtraq&m=107653324115914&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9612
redhat.com/support/errata/RHSA-2004-061.html
slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053
nvd.nist.gov/vuln/detail/CVE-2004-0083
github.com/advisories/GHSA-275v-77j5-j2rj
access.redhat.com/errata/RHSA-2004:061
access.redhat.com/security/updates/classification
idefense.com/application/poi/display?id=73
bugzilla.redhat.com/show_bug.cgi?id=114902
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_061.json
access.redhat.com/security/cve/CVE-2004-0083
bugzilla.redhat.com/show_bug.cgi?id=1617144
cve.org/CVERecord?id=CVE-2004-0083
access.redhat.com/security/cve/CVE-2004-0084
bugzilla.redhat.com/show_bug.cgi?id=1617145
cve.org/CVERecord?id=CVE-2004-0084
nvd.nist.gov/vuln/detail/CVE-2004-0084
access.redhat.com/security/cve/CVE-2004-0106
bugzilla.redhat.com/show_bug.cgi?id=1617151
cve.org/CVERecord?id=CVE-2004-0106
nvd.nist.gov/vuln/detail/CVE-2004-0106