SCO Security Advisory – A buffer overflow in ReadFontAlias from dirfile.c of Xsco may allow local users and remote attackers to execute arbitrary code via a font alias file with a long token. Another buffer overflow in the ReadFontAlias function in Xsco, when using the CopyISOLatin1Lowered function, may allow local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias file.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33942/SCOSA-2004.2.txt
Source: https://packetstormsecurity.com/files/33942/SCOSA-2004.2.txt.html