[SECURITY] Fedora 8 Update: xorg-x11-server-1.3.0.0-39.fc8

X.Org X11 X server...

X.Org X Server MIT-SHM及EVI扩展整数溢出漏洞

BUGTRAQ ID: 27350,27353 CVECAN ID: CVE-2007-6429 Xorg X Server是Solaris x86平台上可用的X窗口系统显示服务器之一。 Xorg X Server的MIT-SHM扩展中负责在共享内存中创建位图的方式存在整数溢出漏洞。在分配位图的时候，服务器使用了来自请求的值验证所请求的大小没有大于所分配的共享内存。这个计算可能溢出，导致覆盖内存中的任意地址。 Xorg X...

[SECURITY] [DSA 1466-3] New xfree86 packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1466-3 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 21, 2008 http://www.debian.org/security/faq -...

GLSA-200801-09 : X.Org X server and Xfont library: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200801-09 X.Org X server and Xfont library: Multiple vulnerabilities regenrecht reported multiple vulnerabilities in various X server extension via iDefense: The XFree86-Misc extension does not properly sanitize a parameter within...

[USN-571-1] X.org vulnerabilities

=========================================================== Ubuntu Security Notice USN-571-1 January 18, 2008 libxfont, xorg-server vulnerabilities CVE-2007-5760, CVE-2007-5958, CVE-2007-6427, CVE-2007-6428, CVE-2007-6429, CVE-2008-0006 =========================================================== ...

X.Org X server and Xfont library: Multiple vulnerabilities

Background The X Window System is a graphical windowing system based on a client/server model. Description regenrecht reported multiple vulnerabilities in various X server extension via iDefense: The XFree86-Misc extension does not properly sanitize a parameter within a PassMessage request,...

iDefense Security Advisory 01.17.08: Multiple Vendor X Server XInput Extension Multiple Memory Corruption Vulnerabilities

iDefense Security Advisory 01.17.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 17, 2008 I. BACKGROUND The X Window System or X11 is a graphical windowing system used on Unix-like systems. It is based on a client/server model. More information about about The X Window system is...

[SECURITY] [DSA 1466-2] New xorg-server packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-1466-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 19, 2008 http://www.debian.org/security/faq -...

USN-571-2: X.org regression

USN-571-1 fixed vulnerabilities in X.org. The upstream fixes were incomplete, and under certain situations, applications using the MIT-SHM extension e.g. Java, wxWidgets would crash with BadAlloc X errors. This update fixes the problem. We apologize for the inconvenience. Original advisory detail...

DSA-1466-2 libxfont xfree86 xorg-server - several vulnerabilities

Bulletin has no description...

libXfont security update

CentOS Errata and Security Advisory CESA-2008:0064 An updated X.Org libXfont package that fixes a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The libXfont package contains the...

xorg security update

CentOS Errata and Security Advisory CESA-2008:0031 Updated xorg-x11-server packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 18th January 2008 Th...

CVE-2008-0006

Buffer overflow in 1 X.Org Xserver before 1.4.1, and 2 the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCFBDFENCODINGS...

CVE-2007-5958

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists...

CVE-2008-0006

Buffer overflow in 1 X.Org Xserver before 1.4.1, and 2 the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCFBDFENCODINGS...

CVE-2008-0006

Buffer overflow in 1 X.Org Xserver before 1.4.1, and 2 the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCFBDFENCODINGS...

Buffer overflow

Buffer overflow in 1 X.Org Xserver before 1.4.1, and 2 the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCFBDFENCODINGS...

CVE-2007-5760

Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index...

CVE-2007-6429

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via 1 a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or 2 a request containing valu...

Integer overflow

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via 1 a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or 2 a request containing valu...