CVE-2013-4396

Synopsis Important: xorg-x11-server security update Type/Severity Security Advisory: Important Topic Updated xorg-x11-server packages that fix one security issue are nowavailable for Red Hat Enterprise Linux 5 and 6The Red Hat Security Response Team has rated this update as havingimportant security impact ...

The XOrg X server could be made to crash or run programs as an administrator if it received specially crafted input ...

Pedro Ribeiro discovered a use-after-free in the handling of ImageText requests in the Xorg Xserver, which could result in denial of service or privilege escalation For the oldstable distribution (squeeze), this problem has been fixed in version 177-17 For the stable distribution (wheezy), this problem has been fixed in version 1124-6+deb7u1 ...

A use-after-free flaw was found in the way the XOrg server handled ImageText requests A malicious, authorized client could use this flaw to crash the XOrg server or, potentially, execute arbitrary code with root privileges (CVE-2013-4396) ...

Use-after-free vulnerability in the doImageText function in dix/dixfontsc in the xorg-server module before 1144 in XOrg X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure ...