Gentoo Security Advisory GLSA 200609-07 (libxfont)

The remote host is missing updates announced in advisory GLSA 200609-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200804-05 (nx, nxnode)

The remote host is missing updates announced in advisory GLSA 200804-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200807-07 : NX: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200807-07 NX: User-assisted execution of arbitrary code Multiple integer overflow and buffer overflow vulnerabilities have been discovered in the X.Org X server as shipped by NX and NX Node GLSA 200806-07. Impact : A remote attack...

NX: User-assisted execution of arbitrary code

Background NoMachine's NX establishes remote connections to X11 desktops over small bandwidth links. NX and NX Node are the compression core libraries, whereas NX is used by FreeNX and NX Node by the binary-only NX servers. Description Multiple integer overflow and buffer overflow vulnerabilities...

CentOS 4 : xorg-x11 (CESA-2008:0503)

Updated xorg-x11 packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The xorg-x11 packages contain X.Org, an open source implementation of the X Window...

xorg security update

CentOS Errata and Security Advisory CESA-2008:0504 Updated xorg-x11-server packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. X.Org is an open source...

GLSA-200806-07 : X.Org X server: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200806-07 X.Org X server: Multiple vulnerabilities Regenrecht reported multiple vulnerabilities in various X server extensions via iDefense: The SProcSecurityGenerateAuthorization and SProcRecordCreateContext functions of the RECO...

GLSA-200806-10 : FreeType: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200806-10 FreeType: User-assisted execution of arbitrary code Regenrecht reported multiple vulnerabilities in FreeType via iDefense: An integer overflow when parsing values in the Private dictionary table in a PFB file, leading to...

CVE-2008-2360

Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based buffer overflow...

CVE-2008-1377

The 1 SProcRecordCreateContext and 2 SProcRecordRegisterClients functions in the Record extension and the 3 SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with...

CVE-2008-1377

The 1 SProcRecordCreateContext and 2 SProcRecordRegisterClients functions in the Record extension and the 3 SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with...

CVE-2008-2361

Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service daemon crash via unspecified request fields that are used to calculate a glyph buffer size, which triggers a...

CVE-2008-2361

Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service daemon crash via unspecified request fields that are used to calculate a glyph buffer size, which triggers a...

Integer overflow

Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service daemon crash via unspecified request fields that are used to calculate a glyph buffer size, which triggers a...

CVE-2008-2362

Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a 1 SProcRenderCreateLinearGradient, 2 SProcRenderCreateRadialGradient, or 3 SProcRenderCreateConicalGradient request with an invalid field...

CVE-2008-1377

CVE-2008-1377 details (X.Org X11R7.3, X server 1.4): The Record extension (SProcRecordCreateContext, SProcRecordRegisterClients) and Security extension (SProcSecurityGenerateAuthorization) allow context-dependent attackers to trigger heap corruption via crafted requests with unusual length values...

CVE-2008-2360

CVE-2008-2360 involves an integer overflow in the AllocateGlyph() function of the X.org Render extension (X.Org X11R7.3, X server 1.4). The overflow can lead to a heap-based buffer overflow, allowing context-dependent attackers to execute arbitrary code or cause a crash if the server runs with su...

CVE-2008-1379

Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height...

CVE-2008-1377

The 1 SProcRecordCreateContext and 2 SProcRecordRegisterClients functions in the Record extension and the 3 SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with...

CVE-2008-2361

CVE-2008-2361 describes an integer overflow in ProcRenderCreateCursor in the X.Org X server’s Render extension (X11R7.3). A context-dependent attacker could trigger a heap-related dereference via crafted request fields that influence the glyph buffer size, leading to a denial of service (daemon c...