CVE-2004-0084
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the...
10.0 HighPublic exploitFix available
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.
Exploit likelihood
24.9%Down 18.0 points since Feb 4, 2022
What each source reports
NVD Score used
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.
- Record
CVE-2004-0084- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.
- Record
CVE-2004-0084- Updated
- 2026-11-02
EUVDEUVD-2004-0084 No score
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.
- Record
EUVD-2004-0084- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4642-rff9-864v No score
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the...
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.
- Record
GHSA-4642-rff9-864v- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xfree86Debian:3.0 |
before 4.1.0-16woody3 | 4.1.0-16woody3 |
XFree86Red Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
Show 107 moreShow less
| Package | Affected | Fixed |
|---|---|---|
XFree86-ISO8859-9-100dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-75dpi-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLURed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XnestRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XvfbRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-base-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-cyrillic-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-develRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-docRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-font-utilsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libs-dataRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-syriac-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-toolsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-truetype-fontsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-twmRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xauthRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xdmRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xfsRed Hat:enterprise_linux:3::as |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86Red Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-100dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-75dpi-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLURed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XnestRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XvfbRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-base-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-cyrillic-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-develRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-docRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-font-utilsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libs-dataRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-syriac-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-toolsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-truetype-fontsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-twmRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xauthRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xdmRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xfsRed Hat:enterprise_linux:3::desktop |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86Red Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-100dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-75dpi-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLURed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XnestRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XvfbRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-base-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-cyrillic-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-develRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-docRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-font-utilsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libs-dataRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-syriac-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-toolsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-truetype-fontsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-twmRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xauthRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xdmRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xfsRed Hat:enterprise_linux:3::es |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86Red Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-14-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-15-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-2-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-100dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-ISO8859-9-75dpi-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-Mesa-libGLURed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XnestRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-XvfbRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-base-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-cyrillic-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-develRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-docRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-font-utilsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-libs-dataRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-syriac-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-toolsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-truetype-fontsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-twmRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xauthRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xdmRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
XFree86-xfsRed Hat:enterprise_linux:3::ws |
before 0:4.3.0-55.EL | 0:4.3.0-55.EL |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | XFree86 4.x - CopyISOLatin1Lowered Font_Name Buffer Overflow | 2004-02-12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0084 is a high vulnerability (CVSS 10.0) in Openbsd, published February 14, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 24.9%, the 97th percentile. Fixed in xfree86 4.1.0-16woody3.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A831
novell.com/linux/security/advisories/2004_06_xf86.html
kb.cert.org/vuls/id/667502
redhat.com/support/errata/RHSA-2004-060.html
sunsolve.sun.com/search/document.do?assetkey=1-26-57768-1
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000821
Show 30 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/15200
marc.info?l=bugtraq&m=110979666528890&w=2
debian.org/security/2004/dsa-443
securityfocus.com/bid/9652
mandriva.com/security/advisories?name=MDKSA-2004:012
idefense.com/application/poi/display?id=73
slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053
nvd.nist.gov/vuln/detail/CVE-2004-0084
github.com/advisories/GHSA-4642-rff9-864v
access.redhat.com/errata/RHSA-2004:061
bugzilla.redhat.com/show_bug.cgi?id=114902
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_061.json
cve.org/CVERecord?id=CVE-2004-0083