Search/CVE-2006-3740

● CVE

CVE-2006-3740

Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.

View graph Watch Export

CVSS v3.1

—

EPSS

0.52%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Connections

2 relationships

Timeline

disclosure → media coverage

Sep 13, 2006

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026