The Xsun(1) server and Xorg(1) server are the X display servers for Version 11 of the X window system on Solaris.

There exists an overflow vulnerability when performing integer multiplication within the libXfont library, as used by the X11 display servers, that can cause a heap overflow while loading the fonts. This may allow a local unprivileged user to be able to execute arbitrary commands with elevated privileges or create a Denial of Service (DoS) to the display managers.

This issue is described in the following documents:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3467
• http://www.idefense.com/intelligence/vulnerabilities/display.php?id=412