Lucene search
FreeBSDA863AA74-24BE-11DA-8882-000E0C33C2DCHistorySep 12, 2005 - 12:00 a.m.
X11 server -- pixmap allocation vulnerability
2005-09-1200:00:00
vuxml.freebsd.org
10
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.025 Low
EPSS
Percentile
90.0%
Allocating large pixmaps by a client can trigger an integer
overflow in the X server, potentially leading to execution of
arbitrary code with elevated (root) privileges.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | xfree86-server | < 4.5.0_2 | UNKNOWN |
| FreeBSD | any | noarch | xorg-server | < 6.8.2_5 | UNKNOWN |
Related
redhat
redhat
(RHSA-2005:396) xorg-x11 security update
2005-09-13 00:00:00
(RHSA-2005:501) XFree86 security update
2005-09-15 00:00:00
(RHSA-2005:329) XFree86 security update
2005-09-12 00:00:00
nessus
nessus
RHEL 2.1 : XFree86 (RHSA-2005:329)
2005-09-13 00:00:00
CentOS 3 : XFree86 (CESA-2005:501)
2006-07-03 00:00:00
Fedora Core 4 : xorg-x11-6.8.2-37.FC4.48.1 (2005-894)
2005-09-17 00:00:00
ubuntu
ubuntu
X server vulnerability
2005-09-12 00:00:00
centos
centos
XFree86 security update
2005-09-13 23:21:44
xorg security update
2005-09-13 18:53:55
XFree86 security update
2005-09-15 10:48:27
openvas
openvas
FreeBSD Ports: XFree86-Server
2008-09-04 00:00:00
SLES9: Security update for XFree86-server
2009-10-10 00:00:00
Gentoo Security Advisory GLSA 200509-07 (X.Org)
2008-09-24 00:00:00
gentoo
gentoo
X.Org: Heap overflow in pixmap allocation
2005-09-12 00:00:00
suse
suse
remote command execution in XFree86-server,xorg-x11-server
2005-09-26 13:04:19
securityvulns
securityvulns
[Full-disclosure] [USN-182-1] X server vulnerability
2005-09-12 00:00:00
cert
cert
Multiple X servers fail to properly allocate memory for large pixmaps
2005-09-13 00:00:00
cve
cve
CVE-2005-2495
2005-09-15 20:03:00
slackware
slackware
X.Org pixmap overflow
2005-09-26 10:43:04
ubuntucve
ubuntucve
CVE-2005-2495
2005-09-15 00:00:00
debian
debian
[SECURITY] [DSA 816-1] New XFree86 packages fix arbitrary code execution
2005-09-22 08:57:47
[SECURITY] [DSA 816-1] New XFree86 packages fix arbitrary code execution
2005-09-22 08:57:47
osv
osv
xfree86 - integer overflow
2005-09-19 00:00:00
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.025 Low
EPSS
Percentile
90.0%
Related for A863AA74-24BE-11DA-8882-000E0C33C2DC