Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

x11r6 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2004-0914
Multiple vulnerabilities in libXpm for 6.8.1 and previous versions, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which c...
Lesstif Lesstif 0.93.34Lesstif Lesstif 0.93.36X.org X11r6 6.8.1Xfree86 Project X11r6 3.3Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.3.0Lesstif Lesstif 0.93.40Lesstif Lesstif 0.93.91Xfree86 Project X11r6 3.3.2Xfree86 Project X11r6 3.3.3Xfree86 Project X11r6 3.3.4Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.1.11Lesstif Lesstif 0.93Lesstif Lesstif 0.93.94Lesstif Lesstif 0.93.96Xfree86 Project X11r6 3.3.5Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.2.0Lesstif Lesstif 0.93.12
10
CVSSv2
CVE-2004-0084
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CV...
Xfree86 Project X11r6 4.2.0Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.1.0Openbsd Openbsd 3.3Openbsd Openbsd 3.4
10
CVSSv2
CVE-2004-0083
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 up to and including 4.3.0 allows local users and remote malicious users to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.2.0Openbsd Openbsd 3.3Openbsd Openbsd 3.4
10
CVSSv2
CVE-2002-1510
xdm, with the authComplain variable set to false, allows arbitrary malicious users to connect to the X server if the xdm auth directory does not exist.
Xfree86 Project X11r6
10
CVSSv2
CVE-1999-0241
Guessable magic cookies in X Windows allows remote malicious users to execute commands, e.g. through xterm.
Sgi IrixXfree86 Project X11r6Sun Solaris 2.5.1Sun Solaris 2.5Sun Solaris 7.0Sun Sunos -
8.5
CVSSv2
CVE-2007-1351
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont prior to 20070403 and (2) freetype 2.3.2 and previous versions allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
Ubuntu Ubuntu Linux 6.06 LtsUbuntu Ubuntu Linux 5.10Ubuntu Ubuntu Linux 6.10X.org Libxfont 1.2.2Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.3.0.1Xfree86 Project X11r6 4.3.0.2Rpath Rpath Linux 1Redhat Enterprise Linux 2.1Redhat Enterprise Linux 4.0Redhat Linux Advanced Workstation 2.1Redhat Enterprise Linux 3.0Redhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux 5.0Openbsd Openbsd 3.9Openbsd Openbsd 4.0Mandrakesoft Mandrake Multi Network Firewall 2.0
7.5
CVSSv2
CVE-2013-7439
Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 prior to 1.6.0 allow remote malicious users to have unspecified impact via a crafted request, which triggers a buffer overflow.
X.org Libx11 1.4.99.902X.org Libx11 1.4.99.901X.org Libx11 1.3.99.901X.org Libx11 1.3.6X.org Libx11 1.2.2X.org Libx11 1.2.1X.org Libx11 1.1.99.1X.org Libx11 1.1X.org Libx11 1.4.4X.org Libx11 1.4.3X.org Libx11 1.3.5X.org Libx11 1.3.4X.org Libx11 1.2X.org Libx11 1.1.6X.org Libx11 1.0.1X.org Libx11 1.5.99.902X.org Libx11 1.4.2X.org Libx11 1.4.1X.org Libx11 1.3.3X.org Libx11 1.3.2X.org Libx11 1.1.5X.org Libx11 1.1.4
7.5
CVSSv2
CVE-2005-0605
scan.c for LibXPM may allow malicious users to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
X.org X11r6 6.8X.org X11r6 6.8.1Xfree86 Project X11r6 3.3Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0Sgi Propack 3.0X.org X11r6 6.7.0Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.2.0Lesstif Lesstif 0.93.94Xfree86 Project X11r6 3.3.4Xfree86 Project X11r6 3.3.5Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 3.3.2Xfree86 Project X11r6 3.3.3Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.3.0.1
7.5
CVSSv2
CVE-2004-0687
Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm prior to 6.8.1 allow remote malicious users to execute arbitrary code via a malformed XPM image file.
Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.0.3X.org X11r6 6.7.0Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.2.1X.org X11r6 6.8Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.2.0Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.1.11Suse Suse Linux 9.0Suse Suse Linux 8.2Suse Suse Linux 8Suse Suse Linux 9.1Openbsd Openbsd 3.5Openbsd Openbsd 3.4Suse Suse Linux 8.1
7.5
CVSSv2
CVE-2004-0688
Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm prior to 6.8.1 may allow remote malicious users to execute arbitrary code via a malformed XPM image fi...
Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0X.org X11r6 6.7.0X.org X11r6 6.8Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.2.0Openbsd Openbsd 3.4Suse Suse Linux 9.0Suse Suse Linux 9.1Openbsd Openbsd 3.5Suse Suse Linux 8.1Suse Suse Linux 8.2Suse Suse Linux 8
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook