Red Hat Desktop, Red Hat Enterprise Linux, Debian GNU/Linux

ソフト名：Red Hat Desktop 4.x, Red Hat Enterprise Linux AS 4/ES 4/WS 4/5 (Server)/Desktop 5/Desktop Workstation 5/Desktop 6/HPC Node 6/Server 6/Workstation 6, Debian GNU/Linux 5.0/6.0 (X.Org libXfont 1.4.4未満)

回避策：RHSA-2011:1154-1, RHSA-2011:1155-1にて対応, DSA-2293-1にて対応

脆弱性：権限の昇格, バウンダリエラー, 不正フォントファイル, バッファオーバーフロー

ソース：

http://www.redhat.com/rhel/

http://www.redhat.com/rhel/server/

http://www.redhat.com/rhel/desktop/

http://www.debian.org/

https://rhn.redhat.com/errata/RHSA-2011-1154.html

https://rhn.redhat.com/errata/RHSA-2011-1155.html

http://lists.debian.org/debian-security-announce/2011/msg00167.html

http://secunia.com/advisories/45544/

http://secunia.com/advisories/45568/

http://secunia.com/advisories/45569/

http://secunia.com/advisories/45599/

http://dvw-j.blogspot.com/2011/08/xorg-libxfont.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2895

CVE：CVE-2011-2895

危険性：Medium Risk