Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xfree86 project x11r6 4.1.0 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2004-0914
Multiple vulnerabilities in libXpm for 6.8.1 and previous versions, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which c...
Lesstif Lesstif 0.93.34Lesstif Lesstif 0.93.36X.org X11r6 6.8.1Xfree86 Project X11r6 3.3Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.3.0Lesstif Lesstif 0.93.40Lesstif Lesstif 0.93.91Xfree86 Project X11r6 3.3.2Xfree86 Project X11r6 3.3.3Xfree86 Project X11r6 3.3.4Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.1.11Lesstif Lesstif 0.93Lesstif Lesstif 0.93.94Lesstif Lesstif 0.93.96Xfree86 Project X11r6 3.3.5Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.2.0Lesstif Lesstif 0.93.12
10
CVSSv2
CVE-2004-0083
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 up to and including 4.3.0 allows local users and remote malicious users to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.2.0Openbsd Openbsd 3.3Openbsd Openbsd 3.4
10
CVSSv2
CVE-2004-0084
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CV...
Xfree86 Project X11r6 4.2.0Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.1.0Openbsd Openbsd 3.3Openbsd Openbsd 3.4
7.5
CVSSv2
CVE-2005-0605
scan.c for LibXPM may allow malicious users to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
X.org X11r6 6.8X.org X11r6 6.8.1Xfree86 Project X11r6 3.3Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0Sgi Propack 3.0X.org X11r6 6.7.0Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.2.0Lesstif Lesstif 0.93.94Xfree86 Project X11r6 3.3.4Xfree86 Project X11r6 3.3.5Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 3.3.2Xfree86 Project X11r6 3.3.3Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.3.0.1
7.5
CVSSv2
CVE-2004-0687
Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm prior to 6.8.1 allow remote malicious users to execute arbitrary code via a malformed XPM image file.
Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.0.3X.org X11r6 6.7.0Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.2.1X.org X11r6 6.8Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.2.0Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.1.11Suse Suse Linux 9.0Suse Suse Linux 8.2Suse Suse Linux 8Suse Suse Linux 9.1Openbsd Openbsd 3.5Openbsd Openbsd 3.4Suse Suse Linux 8.1
7.5
CVSSv2
CVE-2004-0688
Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm prior to 6.8.1 may allow remote malicious users to execute arbitrary code via a malformed XPM image fi...
Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0X.org X11r6 6.7.0X.org X11r6 6.8Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.2.0Openbsd Openbsd 3.4Suse Suse Linux 9.0Suse Suse Linux 9.1Openbsd Openbsd 3.5Suse Suse Linux 8.1Suse Suse Linux 8.2Suse Suse Linux 8
7.5
CVSSv2
CVE-2004-0094
Integer signedness errors in XFree86 4.1.0 allow remote malicious users to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI).
Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.2.0
7.5
CVSSv2
CVE-2004-0093
XFree86 4.1.0 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructure (DRI).
Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.2.0
7.5
CVSSv2
CVE-2003-0063
The xterm terminal emulator in XFree86 4.2.0 and previous versions allows malicious users to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the mal...
Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.2.0Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.1.0
7.2
CVSSv2
CVE-2004-0106
Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.
Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.2.0Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.1.11Openbsd Openbsd 3.3Openbsd Openbsd 3.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook