Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xfree86 project x11r6 4.3.0 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2004-0914
Multiple vulnerabilities in libXpm for 6.8.1 and previous versions, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which c...
Lesstif Lesstif 0.93.34Lesstif Lesstif 0.93.36X.org X11r6 6.8.1Xfree86 Project X11r6 3.3Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.3.0Lesstif Lesstif 0.93.40Lesstif Lesstif 0.93.91Xfree86 Project X11r6 3.3.2Xfree86 Project X11r6 3.3.3Xfree86 Project X11r6 3.3.4Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.1.11Lesstif Lesstif 0.93Lesstif Lesstif 0.93.94Lesstif Lesstif 0.93.96Xfree86 Project X11r6 3.3.5Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.2.0Lesstif Lesstif 0.93.12
10
CVSSv2
CVE-2004-0083
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 up to and including 4.3.0 allows local users and remote malicious users to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.2.0Openbsd Openbsd 3.3Openbsd Openbsd 3.4
10
CVSSv2
CVE-2004-0084
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CV...
Xfree86 Project X11r6 4.2.0Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.1.0Openbsd Openbsd 3.3Openbsd Openbsd 3.4
8.5
CVSSv2
CVE-2007-1351
Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont prior to 20070403 and (2) freetype 2.3.2 and previous versions allows remote authenticated users to execute arbitrary code via crafted BDF fonts, which result in a heap overflow.
Ubuntu Ubuntu Linux 6.06 LtsUbuntu Ubuntu Linux 5.10Ubuntu Ubuntu Linux 6.10X.org Libxfont 1.2.2Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.3.0.1Xfree86 Project X11r6 4.3.0.2Rpath Rpath Linux 1Redhat Enterprise Linux 2.1Redhat Enterprise Linux 4.0Redhat Linux Advanced Workstation 2.1Redhat Enterprise Linux 3.0Redhat Enterprise Linux Desktop 3.0Redhat Enterprise Linux Desktop 4.0Redhat Enterprise Linux 5.0Openbsd Openbsd 3.9Openbsd Openbsd 4.0Mandrakesoft Mandrake Multi Network Firewall 2.0
7.5
CVSSv2
CVE-2005-0605
scan.c for LibXPM may allow malicious users to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
X.org X11r6 6.8X.org X11r6 6.8.1Xfree86 Project X11r6 3.3Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0Sgi Propack 3.0X.org X11r6 6.7.0Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.2.0Lesstif Lesstif 0.93.94Xfree86 Project X11r6 3.3.4Xfree86 Project X11r6 3.3.5Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 3.3.2Xfree86 Project X11r6 3.3.3Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.3.0.1
7.5
CVSSv2
CVE-2004-0687
Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm prior to 6.8.1 allow remote malicious users to execute arbitrary code via a malformed XPM image file.
Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.0.3X.org X11r6 6.7.0Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.2.1X.org X11r6 6.8Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.2.0Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.1.11Suse Suse Linux 9.0Suse Suse Linux 8.2Suse Suse Linux 8Suse Suse Linux 9.1Openbsd Openbsd 3.5Openbsd Openbsd 3.4Suse Suse Linux 8.1
7.5
CVSSv2
CVE-2004-0688
Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm prior to 6.8.1 may allow remote malicious users to execute arbitrary code via a malformed XPM image fi...
Xfree86 Project X11r6 4.0.3Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.0.1Xfree86 Project X11r6 4.0.2.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0X.org X11r6 6.7.0X.org X11r6 6.8Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 3.3.6Xfree86 Project X11r6 4.0Xfree86 Project X11r6 4.2.0Openbsd Openbsd 3.4Suse Suse Linux 9.0Suse Suse Linux 9.1Openbsd Openbsd 3.5Suse Suse Linux 8.1Suse Suse Linux 8.2Suse Suse Linux 8
7.5
CVSSv2
CVE-2004-0094
Integer signedness errors in XFree86 4.1.0 allow remote malicious users to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI).
Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.2.0
7.5
CVSSv2
CVE-2004-0093
XFree86 4.1.0 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructure (DRI).
Xfree86 Project X11r6 4.1.0Xfree86 Project X11r6 4.1.11Xfree86 Project X11r6 4.3.0Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.1.12Xfree86 Project X11r6 4.2.0
7.5
CVSSv2
CVE-2003-0730
Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote malicious users to cause a denial of service or execute arbitrary code via heap-based and stack-based buffer overflow attacks.
Xfree86 Project X11r6 4.2.1Xfree86 Project X11r6 4.3.0Netbsd Netbsd 1.5.1Netbsd Netbsd 1.5.2Netbsd Netbsd 1.5Netbsd Netbsd 1.5.3Netbsd Netbsd 1.6Netbsd Netbsd 1.6.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook