NVidia Linux二进制图形驱动缓冲区溢出漏洞

NVidia是世界领先的图形处理芯片和显卡制造商。 NVIDIA的二进制blob驱动在加速渲染glyphs（文本字符数据）时存在缓冲区溢出，允许攻击者向内存中的任意位置写入数据。 XRender扩展提供一个名为XRenderCompositeString8的客户端函数要求X服务器在屏幕上渲染glyphs。服务程序的ProcRenderCompositeGlpyhs函数会处理这个请求，从渲染请求中提取出glyphs，创建一个glyph列表，然后通过注册的回调函数调用图形驱动。...

NVIDIA Display Driver for Unix systems vulnerable to buffer overflow

Overview A vulnerability in the NVIDIA Display Driver for Unix systems may allow a remote attacker to execute code on a vulnerable system. Description The NVIDIA Display Driver for Unix systems provides access to the display adapter's accelerated features on supported systems, and includes a modu...

USN-344-1: X.org vulnerabilities

iDefense security researchers found several integer overflows in X.org's font handling library. By using a specially crafted Type1 CID font file, a local user could exploit these to crash the X server or execute arbitrary code with root privileges...

CVE-2006-3740

Integer overflow in the scancidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted 1 CMap and 2 CIDFont font data with modified item counts in the a begincodespacerange, b cidrange, and c notdefrange sections...

CVE-2006-3739

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

CVE-2006-3739

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

CVE-2006-3739

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

LibXfont, monolithic X.org: Multiple integer overflows

Background libXfont is the X.Org Xfont library, some parts are based on the FreeType code base. Description Several integer overflows have been found in the CID font parser. Impact A remote attacker could exploit this vulnerability by enticing a user to load a malicious font file resulting in the...

security flaw

Integer overflow in the scancidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted 1 CMap and 2 CIDFont font data with modified item counts in the a begincodespacerange, b cidrange, and c notdefrange sections...

X11R6 6.4 XKEYBOARD (SolarisSPARC) - Local Buffer Overflow (1)

X11R6 6.4 XKEYBOARD SolarisSPARC - Local Buffer Overflow 1 / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 SPARC Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public Licen...

CVE-2006-3506

CVE-2006-3506 affects Apple Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7. A buffer overflow in the driver may allow a local, authenticated user with write access to execute arbitrary code via a crafted path name. Impact includes remote/root-level code execution or DoS as state...

[SA21446] XFree86 PCF Integer Overflow Vulnerabilities

TITLE: XFree86 PCF Integer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA21446 VERIFY ADVISORY: http://secunia.com/advisories/21446/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: XFree86 4.5.x http://secunia.com/product/4870/ XFree86 4.4.x...

X.Org server buffer overflow in Xrender extension

Overview A vulnerability in the X.Org X server could allow an attacker to execute arbitrary code with the privileges of the server. Description The X Window System provides a number of components to support graphical user interfaces, primarily on Unix-like operating systems. It features a...

Ubuntu 5.04 / 5.10 : xorg vulnerability (USN-280-1)

The Render extension of the X.org server incorrectly calculated the size of a memory buffer, which led to a buffer overflow. A local attacker could exploit this to crash the X server or even execute arbitrary code with root privileges. Note that Tenable Network Security has extracted the precedin...

X.Org X Server bufer overflow

Buffer overflow in XRender extension...

CVE-2006-1526

Buffer overflow in the X render Xrender extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service crash, as demonstrated by the 1 XRenderCompositeTriStrip and 2 XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory...

CVE-2006-1526

Buffer overflow in the X render Xrender extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service crash, as demonstrated by the 1 XRenderCompositeTriStrip and 2 XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory...

Buffer overflow

Buffer overflow in the X render Xrender extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service crash, as demonstrated by the 1 XRenderCompositeTriStrip and 2 XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory...

CVE-2006-1526

Buffer overflow in the X render Xrender extension in X.org X server 6.8.0 up to allows attackers to cause a denial of service crash, as demonstrated by the 1 XRenderCompositeTriStrip and 2 XRenderCompositeTriFan requests in the rendertest from XCB xcb/xcb-demo, which leads to an incorrect memory...

CVE-2006-1526

Summary (CVE-2006-1526) A buffer overflow in the X.Org X server render extension (XRender) could allow an authorized client to crash the server and potentially execute code with root privileges. The issue stems from a typographical error that miscomputes memory allocation sizes in XRenderComposit...