USN-1714-1: QXL graphics driver vulnerability

It was discovered that the QXL graphics driver incorrectly handled terminated connections. An attacker that could connect to a guest using SPICE and the QXL graphics driver could cause the guest to hang or crash, resulting in a denial of service...

CentOS Update for xorg-x11-drv-qxl CESA-2013:0218 centos6

Check for the Version of xorg-x11-drv-qxl OpenVAS Vulnerability Test CentOS Update for xorg-x11-drv-qxl CESA-2013:0218 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

X.Org / XFree86 xfs DoS

Invalid SendErrToClient function use...

UbnHD2 : Ubuntu based Pentesting OS for Mobiles

Most of the crazy readers always demand for some solution to turn their Android Smartphone into a Hacking Machine. There are various solutions, like installing some penetration testing android based tools like ANTI, dSploit, FaceNiff etc and also Installing ARM version of Backtrack OS. Today I...

Memory corruption

The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service memory corruption and crash or obtain...

CVE-2012-1699

The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service memory corruption and crash or obtain...

CVE-2012-1699

The CVE-2012-1699 entry concerns the xfs font server (Difs) in X.Org X11R6 up to 6.6 and XFree86 before 3.3.3. The root cause is that ProcSetEventMask in difs/events.c calls SendErrToClient with a mask value instead of a pointer. This can allow local users to cause memory corruption and a crash o...

CVE-2012-1699

The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service memory corruption and crash or obtain...

USN-1591-1: xdiagnose update

Alec Warner discovered that xdiagnose improperly handled temporary files in welcome.py when creating user-initiated archive files. While failsafeX does not use the vulnerable code, this update removes this functionality to protect any 3rd party applications which import the vulnerable code. In th...

Code injection

libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the...

CVE-2012-3524

libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the...

CVE-2012-3524

CVE-2012-3524 affects libdbus 1.5.x and earlier when used in setuid/privileged programs; it permits local privilege escalation via the DBUS_SYSTEM_BUS_ADDRESS environment variable. Mitigation per the advisories is that the vulnerability lies in applications that fail to cleanse environment variab...

CVE-2012-3524

libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the...

CVE-2012-3524

libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the...

Slackware Advisory SSA:2005-269-02 X.Org pixmap overflow

The remote host is missing an update as announced via advisory SSA:2005-269-02. OpenVAS Vulnerability Test $Id: esoftslkssa200526902.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2006-123-01 xorg server overflow

The remote host is missing an update as announced via advisory SSA:2006-123-01. OpenVAS Vulnerability Test $Id: esoftslkssa200612301.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2006-123-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4818

The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service server crash and possibly execute arbitrary code via 1 a crafted request that triggers a client swap in glx/glxcmdsswap.c; or 2 a crafted length or 3 a negative value in the screen field in a...

DEBIAN-CVE-2010-4818

The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service server crash and possibly execute arbitrary code via 1 a crafted request that triggers a client swap in glx/glxcmdsswap.c; or 2 a crafted length or 3 a negative value in the screen field in a...

CVE-2010-4818

The GLX extension in X.Org xserver 1.7.7 allows remote authenticated users to cause a denial of service server crash and possibly execute arbitrary code via 1 a crafted request that triggers a client swap in glx/glxcmdsswap.c; or 2 a crafted length or 3 a negative value in the screen field in a...