x.org x font server vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

Integer overflow in the build_range function in X.Org X Font Server (xfs) prior to 1.0.5 allows context-dependent malicious users to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer o...

X.org X Font Server 1.0.1 X.org X Font Server 1.0.2 X.org X Font Server 1.0.4

7.5

CVSSv2

The swap_char2b function in X.Org X Font Server (xfs) prior to 1.0.5 allows context-dependent malicious users to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped o...

X.org X Font Server

3.6

CVSSv2

The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 prior to 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and...

X X.org X11 6.0 X X.org X11 6.4 X X.org X11 6.5.1 X X.org X11 6.1 X X.org X11 6.3 X X.org X11 6.6 Xfree86 Xfree86

7.2

CVSSv2

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics (AFM) files with a modified number of character metrics (StartCharMetrics), which leads to a heap-based buffer overflow.

X.org X.org 6.8.2 Xfree86 Project Xfree86 X

7.2

CVSSv2

Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.

X.org X.org 6.8.2 Xfree86 Project Xfree86 X

7.2

CVSSv2

X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceed...

X.org X11r6 6.8.1 X.org X11r6 6.8.2 X.org Xload 1.0.0 X.org Xorg-server 1.02 R5 X.org Emu-linux-x87-xlibs 7.0 R1 X.org X11r6 6.7.0 X.org X11r6 6.8 X.org Xf86dga 1.0.0 X.org Xinit 1.0.2 R5 X.org X11r7 1.0 X.org X11r7 1.0.1 X.org Xterm 214 X.org X11r7 1.0.2 X.org Xdm 1.0.3

7.5

CVSSv2

Buffer overflow in (1) X.Org Xserver prior to 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent malicious users to execute arbitrary code via a PCF font with a large difference between the last col and first col va...

Sun Solaris Libfont Sun Solaris Libxfont X.org Xserver

3.6

CVSSv2

In the pcfGetProperties function in bitmap/pcfread.c in libXfont up to and including 1.5.2 and 2.x prior to 2.0.2, a missing boundary check (for PCF files) could be used by local attackers authenticated to an Xserver for a buffer over-read, for information disclosure or a crash o...

X.org Libxfont 2.0.0 X.org Libxfont 2.0.1 X.org Libxfont

9

CVSSv2

Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions prior to 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in...

X.org X11 7.1 1.1.0

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook