GLSA-200710-16 : X.Org X server: Composite local privilege escalation

The remote host is affected by the vulnerability described in GLSA-200710-16 X.Org X server: Composite local privilege escalation Aaron Plattner discovered a buffer overflow in the compNewPixmap function when copying data from a large pixel depth pixmap into a smaller pixel depth pixmap. Impact :...

X.Org X server: Composite local privilege escalation

Background The X Window System is a graphical windowing system based on a client/server model. Description Aaron Plattner discovered a buffer overflow in the compNewPixmap function when copying data from a large pixel depth pixmap into a smaller pixel depth pixmap. Impact A local attacker could...

X.Org X server composite extention buffer overflow

No description provided...

Apple Safari跨域竞争条件信息泄露漏洞

Apple Safari是一款WEB浏览器。 Apple Safari更新页面时处理HTTP重定向存在竞争条件问题，远程攻击者可以利用漏洞进行跨域攻击，获得敏感信息。 当更新页面并组合HTTP重定向条件，Safari可以允许JavaScript修改其他域的内容，导致敏感信息泄露 Apple Safari 3.0.1 Beta for Windows Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 升级程序： Apple Mac OS X Server 10.4.10 Apple Safari302Beta.dmg...

Mac OS X vpnd local format string

======= Summary ======= Name: Mac OS X vpnd local format string Release Date: 29 May 2007 Reference: NGS00496 Discover: Chris Anley [email protected] Vendor: Apple Vendor Reference: 26417237 CVE-ID: CVE-2007-0753 Systems Affected: OS X Server 10.4.9 and prior Risk: High Status: Published...

Authorization

The Apple Security Update 2007-004 uses an incorrect configuration file for FTPServer in Apple Mac OS X Server 10.4.9, which might allow remote authenticated users to access additional directories...

CVE-2007-0745

The CVE affects Apple Mac OS X Server 10.4.9 where the FTPServer configuration file is incorrect in Apple Security Update 2007-004, potentially allowing remote authenticated users to access additional directories. The connected documents provide the misconfiguration and impact but do not include ...

Mandrake Linux Security Advisory : tightvnc (MDKSA-2007:080-1)

Local exploitation of a memory corruption vulnerability in the X.Org and XFree86 X server could allow an attacker to execute arbitrary code with privileges of the X server, typically root. The vulnerability exists in the ProcXCMiscGetXIDList function in the XC-MISC extension. This request is used...

[Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor X Server fonts.dir File Parsing Integer Overflow Vulnerability

Multiple Vendor X Server fonts.dir File Parsing Integer Overflow Vulnerability iDefense Security Advisory 04.03.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2007 I. BACKGROUND The X Window System or X11 is a graphical windowing system used on Unix-like systems. It is based on...

[Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor X Server XC-MISC Extension Memory Corruption Vulnerability

Multiple Vendor X Server XC-MISC Extension Memory Corruption Vulnerability iDefense Security Advisory 04.03.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 03, 2007 I. BACKGROUND The X Window System or X11 is a graphical windowing system used on Unix-like systems. It is based on a...

xserver XC-MISC integer overflow

Integer overflow in ALLOCATELOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server xserver 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption...

US-CERT Technical Cyber Security Alert TA07-072A -- Apple Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-072A Apple Updates for Multiple Vulnerabilities Original release date: March 13, 2007 Last revised: -- Source: US-CERT Systems Affected Apple Mac OS X version 10.3.x and 10.4.x Apple Mac ...

Mandrake Linux Security Advisory : xorg-x11 (MDKSA-2007:005)

Sean Larsson of iDefense Labs discovered several vulnerabilities in X.Org/XFree86 : Local exploitation of a memory corruption vulnerability in the 'ProcRenderAddGlyphs' function in the X.Org and XFree86 X server could allow an attacker to execute arbitrary code with privileges of the X server,...

GLSA-200701-25 : X.Org X server: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200701-25 X.Org X server: Multiple vulnerabilities Multiple memory corruption vulnerabilities have been found in the ProcDbeGetVisualInfo and the ProcDbeSwapBuffers of the DBE extension, and ProcRenderAddGlyphs in the Render...

Fedora Core 5 : xorg-x11-server-1.0.1-9.fc5.1.1 (2006-483)

A buffer overflow in the X server RENDER extension implementation, documented in CVE-2006-1526 has been fixed in this release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

Fedora Core 4 : xorg-x11-6.8.2-37.FC4.49.2.1 (2006-484)

A buffer overflow in the X server RENDER extension implementation, documented in CVE-2006-1526 has been fixed in this release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

X.Org DBE和Render扩展多个整数溢出漏洞

X.Org是X.Org Foundation对X窗口系统的开源实现。 X.Org Render扩展的ProcRenderAddGlyphs函数及DBE扩展的ProcDbeGetVisualInfo和ProcDbeSwapBuffers函数没有正确验证用户输入，允许攻击者通过向X服务器发送特制的X请求触发整数溢出，本地攻击者可能利用此漏洞获取root用户权限。 X.org X11R6 6.9.0 X.org X11R7 7.1 X.org X11R7 7.0 临时解决方法：...

security flaw

Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code via a crafted X protocol request that triggers memory corruption during processing of unspecified data structures...

[SECURITY] Fedora Core 6 Update: xorg-x11-server-1.1.1-47.4.fc6

X.Org X11 X server...

iDefense Security Advisory 01.09.07: Multiple Vendor X Server Render Extension ProcRenderAddGlyphs Memory Corruption Vulnerability

Multiple Vendor X Server Render Extension ProcRenderAddGlyphs Memory Corruption Vulnerability iDefense Security Advisory 01.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 09, 2007 I. BACKGROUND The X Window System is a graphical windowing system based on a client/server model...