xfree86 project xfree86 x server vulnerabilities and exploits

(subscribe to this query)

dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the root file system.

Xfree86 Project Xfree86 X Server 4.1.0.2

Multiple integer overflows in XFree86 prior to 4.3.0 allow user-assisted malicious users to execute arbitrary code via a crafted pixmap image.

Xfree86 Project Xfree86 3.3.6 Xfree86 Project Xfree86 4.0.0 Xfree86 Project Xfree86 4.0.1 Xfree86 Project Xfree86 4.0.2 Xfree86 Project Xfree86 4.2.0 Xfree86 Project Xfree86 4.2.1 Xfree86 Project Xfree86 4.0.3 Xfree86 Project Xfree86 4.1.0

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics (AFM) files with a modified number of character metrics (StartCharMetrics), which leads to a heap-based buffer overflow.

X.org X.org 6.8.2 Xfree86 Project Xfree86 X

Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.

X.org X.org 6.8.2 Xfree86 Project Xfree86 X

Integer signedness errors in XFree86 4.1.0 allow remote malicious users to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI).

Xfree86 Project X11r6 4.1.0 Xfree86 Project X11r6 4.1.11 Xfree86 Project X11r6 4.2.1 Xfree86 Project X11r6 4.3.0 Xfree86 Project X11r6 4.1.12 Xfree86 Project X11r6 4.2.0

Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CV...

Xfree86 Project X11r6 4.2.0 Xfree86 Project X11r6 4.2.1 Xfree86 Project X11r6 4.3.0 Xfree86 Project X11r6 4.1.11 Xfree86 Project X11r6 4.1.12 Xfree86 Project X11r6 4.1.0 Openbsd Openbsd 3.3 Openbsd Openbsd 3.4

1 EDB exploit

XFree86 4.1.0 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructure (DRI).

Xfree86 Project X11r6 4.1.0 Xfree86 Project X11r6 4.1.11 Xfree86 Project X11r6 4.3.0 Xfree86 Project X11r6 4.2.1 Xfree86 Project X11r6 4.1.12 Xfree86 Project X11r6 4.2.0

Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified da...

X.org X.org 6.9.0 X.org X.org 7.0 X.org X.org 6.8.2 X.org X.org 7.1 Xfree86 Project Xfree86 X Server

Array index error in the XFree86-Misc extension in X.Org Xserver prior to 1.4.1 allows context-dependent malicious users to execute arbitrary code via a PassMessage request containing a large array index.

Xfree86 Project Xfree86-misc X.org Xserver

Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.

Xfree86 Project X11r6 4.3.0 Xfree86 Project X11r6 4.2.1 Xfree86 Project X11r6 4.1.12 Xfree86 Project X11r6 4.2.0 Xfree86 Project X11r6 4.1.0 Xfree86 Project X11r6 4.1.11 Openbsd Openbsd 3.3 Openbsd Openbsd 3.4

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook