JVN#88935101: X.Org Foundation X server buffer overflow vulnerability

The X.Org Foundation provides an open source implementation of the X Window System. The X server of this implementation contains a vulnerability in the handling of Portable Compiled Font PCF format fonts that can be exploited to cause a buffer overflow. Impact An attacker with an established,...

[SECURITY] Fedora 8 Update: nx-3.1.0-25.1.fc8

NX provides a proxy system for the X Window System...

X.Org X Server MIT-SHM及EVI扩展整数溢出漏洞

BUGTRAQ ID: 27350,27353 CVECAN ID: CVE-2007-6429 Xorg X Server是Solaris x86平台上可用的X窗口系统显示服务器之一。 Xorg X Server的MIT-SHM扩展中负责在共享内存中创建位图的方式存在整数溢出漏洞。在分配位图的时候，服务器使用了来自请求的值验证所请求的大小没有大于所分配的共享内存。这个计算可能溢出，导致覆盖内存中的任意地址。 Xorg X...

iDefense Security Advisory 01.17.08: Multiple Vendor X Server EVI and MIT-SHM Extensions Integer Overflow Vulnerabilities

iDefense Security Advisory 01.17.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 17, 2008 I. BACKGROUND The X Window System or X11 is a graphical windowing system used on Unix-like systems. It is based on a client/server model. More information about about The X Window system is...

iDefense Security Advisory 01.17.08: Multiple Vendor X Server XFree86-Misc Extension Invalid Array Index Vulnerability

iDefense Security Advisory 01.17.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 17, 2008 I. BACKGROUND The X Window System or X11 is a graphical windowing system used on Unix-like systems. It is based on a client/server model. More information about about The X Window system is...

iDefense Security Advisory 01.17.08: Multiple Vendor X Server TOG-CUP Extension Information Disclosure Vulnerability

iDefense Security Advisory 01.17.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 17, 2008 I. BACKGROUND The X Window System or X11 is a graphical windowing system used on Unix-like systems. It is based on a client/server model. More information about about The X Window system is...

X.Org X server and Xfont library: Multiple vulnerabilities

Background The X Window System is a graphical windowing system based on a client/server model. Description regenrecht reported multiple vulnerabilities in various X server extension via iDefense: The XFree86-Misc extension does not properly sanitize a parameter within a PassMessage request,...

[SECURITY] Fedora 7 Update: cairo-1.4.14-1.fc7

Cairo is a vector graphics library designed to provide high-quality display and print output. Currently supported output targets include the X Window System, OpenGL via glitz, in-memory image buffers, and image files PDF, PostScript, and SVG. Cairo is designed to produce identical output on all...

XFree86 security update

CentOS Errata and Security Advisory CESA-2008:0029 Updated XFree86 packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 18th January 2008 Th...

Xorg / XFree86 PCF font parser buffer overflow

Buffer overflow in 1 X.Org Xserver before 1.4.1, and 2 the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCFBDFENCODINGS...

xfree86: information disclosure via TOG-CUP extension

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index...

Important: Red Hat Security Advisory: xorg-x11 security update

Updated xorg-x11 packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 18th January 2008 The original packages distributed with this errata had a bug...

Debian Security Advisory DSA 380-1 (xfree86)

The remote host is missing an update to xfree86 announced via advisory DSA 380-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1193-1 (xfree86)

The remote host is missing an update to xfree86 announced via advisory DSA 1193-1. Several vulnerabilities have been discovered in the X Window System, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following...

Debian: Security Advisory (DSA-1193-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Low: Red Hat Security Advisory: xterm security update

An updated xterm package that corrects a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and...

[SECURITY] Fedora 8 Update: xpdf-3.02-4.fc8

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

xpdf security update

CentOS Errata and Security Advisory CESA-2007:1029 Updated xpdf packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Xpdf is an X Window System-based viewer...

[SECURITY] Fedora 8 Update: xscreensaver-5.03-14.fc8

A modular screen saver and locker for the X Window System. More than 200 display modes are included in this package. This is a metapackage for installing all default packages related to XScreenSaver...

[SECURITY] Fedora 7 Update: xscreensaver-5.03-14.fc7

A modular screen saver and locker for the X Window System. More than 200 display modes are included in this package. This is a metapackage for installing all default packages related to XScreenSaver...