Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

x.org xfree86 4.0 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv2
CVE-2014-8093
Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) prior to 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code vi...
X.org X11 6.7X.org Xorg-serverX.org Xfree86 4.0
6.5
CVSSv2
CVE-2014-8099
The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) prior to 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via ...
X.org X11 6.7X.org Xorg-serverX.org Xfree86 4.0
7.5
CVSSv2
CVE-2004-0687
Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm prior to 6.8.1 allow remote malicious users to execute arbitrary code via a malformed XPM image file.
Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.0.3X.org X11r6 6.7.0Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.2.1X.org X11r6 6.8Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.2.0Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.1.11Suse Suse Linux 9.0Suse Suse Linux 8.2Suse Suse Linux 8Suse Suse Linux 9.1Openbsd Openbsd 3.5Openbsd Openbsd 3.4Suse Suse Linux 8.1
7.5
CVSSv2
CVE-2004-0688
Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm prior to 6.8.1 may allow remote malicious users to execute arbitrary code via a malformed XPM image fi...
Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0X.org X11r6 6.7.0X.org X11r6 6.8Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.2.0Openbsd Openbsd 3.4Suse Suse Linux 9.0Suse Suse Linux 9.1Openbsd Openbsd 3.5Suse Suse Linux 8.1Suse Suse Linux 8.2Suse Suse Linux 8
10
CVSSv2
CVE-2004-0914
Multiple vulnerabilities in libXpm for 6.8.1 and previous versions, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which c...
Lesstif Lesstif 0.93.34Lesstif Lesstif 0.93.36X.org X11r6 6.8.1Xfree86 Project X11r6 3.3Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.3.0Lesstif Lesstif 0.93.40Lesstif Lesstif 0.93.91Xfree86 Project X11r6 3.3.2Xfree86 Project X11r6 3.3.3Xfree86 Project X11r6 3.3.4Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.1.11Lesstif Lesstif 0.93Lesstif Lesstif 0.93.94Lesstif Lesstif 0.93.96Xfree86 Project X11r6 3.3.5Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.2.0Lesstif Lesstif 0.93.12
7.5
CVSSv2
CVE-2005-0605
scan.c for LibXPM may allow malicious users to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
X.org X11r6 6.8X.org X11r6 6.8.1Xfree86 Project X11r6 3.3Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0Sgi Propack 3.0X.org X11r6 6.7.0Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.2.0Lesstif Lesstif 0.93.94Xfree86 Project X11r6 3.3.4Xfree86 Project X11r6 3.3.5Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 3.3.2Xfree86 Project X11r6 3.3.3Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.3.0.1
8.5
CVSSv2
CVE-2007-1351
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont prior to 20070403 and (2) freetype 2.3.2 and previous versions allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
Ubuntu Ubuntu Linux 6.06 LtsUbuntu Ubuntu Linux 5.10Ubuntu Ubuntu Linux 6.10X.org Libxfont 1.2.2Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.3.0.1Xfree86 Project X11r6 4.3.0.2Rpath Rpath Linux 1Redhat Enterprise Linux 2.1Redhat Enterprise Linux 4.0Redhat Linux Advanced Workstation 2.1Redhat Enterprise Linux 3.0Redhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux 5.0Openbsd Openbsd 3.9Openbsd Openbsd 4.0Mandrakesoft Mandrake Multi Network Firewall 2.0
3.8
CVSSv2
CVE-2007-1352
Integer overflow in the FontFileInitTable function in X.Org libXfont prior to 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.
Mandrakesoft Mandrake Multi Network Firewall 2.0X.org Libxfont 1.2.2Redhat Enterprise Linux 2.1Redhat Enterprise Linux 3.0Redhat Enterprise Linux 4.0Redhat Fedora Core Core 1.0Redhat Linux 9.0Redhat Enterprise Linux Desktop 5.0Redhat Linux Advanced Workstation 2.1Redhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Desktop 4.0Slackware Slackware Linux CurrentSlackware Slackware Linux 9.0Slackware Slackware Linux 9.1Turbolinux Turbolinux Desktop 10.0Ubuntu Ubuntu Linux 5.10Ubuntu Ubuntu Linux 6.06 LtsUbuntu Ubuntu Linux 6.10Ubuntu Ubuntu Linux 4.1Rpath Linux 1Openbsd Openbsd 3.9Openbsd Openbsd 4.0
6.2
CVSSv2
CVE-2007-3103
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file.
Fedoraproject Fedora Core 6.0Redhat Enterprise Linux 4.0Redhat Enterprise Linux Desktop 4.0Redhat Linux
9.3
CVSSv2
CVE-2007-6427
The XInput extension in X.Org Xserver prior to 1.4.1 allows context-dependent malicious users to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.
X.org X ServerCanonical Ubuntu Linux 6.06Canonical Ubuntu Linux 6.10Canonical Ubuntu Linux 7.04Canonical Ubuntu Linux 7.10Debian Debian Linux 3.1Debian Debian Linux 4.0Apple Mac Os XFedoraproject Fedora 7Fedoraproject Fedora 8Opensuse Opensuse 10.2Opensuse Opensuse 10.3Suse Linux 10.1Suse Linux Enterprise Desktop 9Suse Linux Enterprise Desktop 10Suse Linux Enterprise Server 8Suse Linux Enterprise Server 9Suse Linux Enterprise Server 10Suse Linux Enterprise Software Development Kit 10Suse Open Enterprise Server -
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook