CVE-2004-0093

2004-09-0104:00:00

[email protected]

web.nvd.nist.gov

xfree86

remote code execution

glx extension

dri

cve-2004-0093

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

Low

0.076 Low

EPSS

Percentile

94.2%

JSON

XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructure (DRI).

Affected configurations

NVD

Node

xfree86_projectx11r6Match4.1.0

xfree86_projectx11r6Match4.1.11

xfree86_projectx11r6Match4.1.12

xfree86_projectx11r6Match4.2.0

xfree86_projectx11r6Match4.2.1

xfree86_projectx11r6Match4.2.1errata

xfree86_projectx11r6Match4.3.0

CPENameOperatorVersion
xfree86_project:x11r6xfree86 project x11r6eq4.1.0
xfree86_project:x11r6xfree86 project x11r6eq4.1.11
xfree86_project:x11r6xfree86 project x11r6eq4.1.12
xfree86_project:x11r6xfree86 project x11r6eq4.2.0
xfree86_project:x11r6xfree86 project x11r6eq4.2.1
xfree86_project:x11r6xfree86 project x11r6eq4.3.0

CPE	Name	Operator	Version
xfree86_project:x11r6	xfree86 project x11r6	eq	4.1.0
xfree86_project:x11r6	xfree86 project x11r6	eq	4.1.11
xfree86_project:x11r6	xfree86 project x11r6	eq	4.1.12
xfree86_project:x11r6	xfree86 project x11r6	eq	4.2.0
xfree86_project:x11r6	xfree86 project x11r6	eq	4.2.1
xfree86_project:x11r6	xfree86 project x11r6	eq	4.3.0