X.org MIT-SHM extension arbitrary memory read

🗓️ 11 Jun 2008 19:23:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 3 Views

Integer overflow in Shared Memory extension fbShmPutImage in X.Org X11R7.3 enables memory read via crafted pixmap size.

Reporter	Title	Published	Views	Family All 212
ALT Linux	Security fix for the ALT Linux 10 package xorg-server version 2:1.4.0.90-alt23	9 Jun 200800:00	–	altlinux
FreeBSD	xorg -- multiple vulnerabilities	11 Jun 200800:00	–	freebsd
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	3	i386	xfree86	0:4.3.0-128.EL	XFree86-0:4.3.0-128.EL.i386.rpm
Red Hat Enterprise Linux	3	ia64	xfree86	0:4.3.0-128.EL	XFree86-0:4.3.0-128.EL.ia64.rpm
Red Hat Enterprise Linux	3	ppc	xfree86	0:4.3.0-128.EL	XFree86-0:4.3.0-128.EL.ppc.rpm
Red Hat Enterprise Linux	3	s390	xfree86	0:4.3.0-128.EL	XFree86-0:4.3.0-128.EL.s390.rpm
Red Hat Enterprise Linux	3	s390x	xfree86	0:4.3.0-128.EL	XFree86-0:4.3.0-128.EL.s390x.rpm
Red Hat Enterprise Linux	3	x86_64	xfree86	0:4.3.0-128.EL	XFree86-0:4.3.0-128.EL.x86_64.rpm
Red Hat Enterprise Linux	3	i386	xfree86-100dpi-fonts	0:4.3.0-128.EL	XFree86-100dpi-fonts-0:4.3.0-128.EL.i386.rpm
Red Hat Enterprise Linux	3	ia64	xfree86-100dpi-fonts	0:4.3.0-128.EL	XFree86-100dpi-fonts-0:4.3.0-128.EL.ia64.rpm
Red Hat Enterprise Linux	3	ppc	xfree86-100dpi-fonts	0:4.3.0-128.EL	XFree86-100dpi-fonts-0:4.3.0-128.EL.ppc.rpm
Red Hat Enterprise Linux	3	s390	xfree86-100dpi-fonts	0:4.3.0-128.EL	XFree86-100dpi-fonts-0:4.3.0-128.EL.s390.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2008-1379
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2008-1379
cve	www.cve.org/CVERecord

25 Jun 2026 10:35Current

7.5High risk

Vulners AI Score7.5

CVSS 26.8

EPSS0.01387

Shared Memory extension X server vulnerability Memory read risk Integer overflow Pixmap size attack X.Org implementation