733 matches found
XFree86 X11R6 3.3.x Font Server Remote Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6241/info A remotely exploitable buffer overrun condition has been reported in the XFS font server, fs.auto used by multiple vendors. This vulnerability may be exploited by remote attackers to execute commands on the targ...
Slackware Linux 3.1 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/364/info superprobe is an program supplied with XFree86 that helps determine video hardware. It is shipped with Slackware Linux 3.1 and is installed setuid root. There is an exploitable strcpy buffer overflow in the...
X 11.0/3.3.3/3.3.4/3.3.5/3.3.6/4.0 libX11 _XAsyncReply() Stack Corruption
No description provided by source. source: http://www.securityfocus.com/bid/1408/info A vulnerability exists in the XAsyncReply function of libX11. This function utilizes size information retrieved as part of a client supplied packet. This value is a signed integer. By forcing this value to be...
XFree86 4.2 XLOCALEDIR Local Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/7002/info Several XFree86 utilities may be prone to a buffer overflow condition. The vulnerability exists due to insufficient boundary checks performed by these utilities when referencing the XLOCALEDIR environment...
XFree86 X11R6 3.3.2 XMan ManPath Environment Variable Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/3030/info xman is a component included with the XFree86 Window System. A buffer overflow in the handling of the MANPATH environment variable by xman makes it possible for a local user to execute arbitrary code. By inserti...
XFree86 4.x CopyISOLatin1Lowered Font_Name Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9652/info It has been reported that the XFree86 X Windows system is prone to a local buffer overflow vulnerability. The issue arises from improper bounds checking when parsing the 'font.alias' file. Successful exploitatio...
XFree86 3.3.5/3.3.6 Xlib Display Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1805/info A vulnerability exists in xlib, the C language interface to the X Window System protocol. When applications linked to the xlib library are run, user-supplied values for the DISPLAY environment variable and the...
Oracle Linux 3 : XFree86 (ELSA-2008-0029)
From Red Hat Security Advisory 2008:0029 : Updated XFree86 packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 18th January 2008 The origin...
Oracle Linux 3 : XFree86 (ELSA-2007-0002)
From Red Hat Security Advisory 2007:0002 : Updated XFree86 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an implementation of the X Windo...
CentOS 3 : XFree86 (CESA-2005:787)
The remote CentOS host is missing a security update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from CentOS Errata and Security Advisory 2005:787. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid67034;...
CVE-2011-2504
Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory...
DEBIAN-CVE-2011-2504
Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory...
CVE-2011-2504
Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory...
CVE-2011-2504
The vulnerability CVE-2011-2504 affects X.Org/XFree86 x11perf components: x11perfcomp in XFree86 x11perf before 1.5.4 has an untrusted search path that allows a local user to execute Trojan horse code from the current working directory to gain privileges. Documented in multiple advisories (Miracl...
CVE-2011-2504
Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory...
CVE-2011-2504
Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory...
x11perfcomp has dot in its path
Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory...
PT-2013-1397 · Xfree86 +2 · Xfree86 +2
Name of the Vulnerable Software and Affected Versions: XFree86 x11perf versions prior to 1.5.4 Description: The issue allows local users to gain privileges through unspecified Trojan horse code in the current working directory due to an untrusted search path vulnerability in x11perfcomp...
X.Org / XFree86 xfs DoS
Invalid SendErrToClient function use...
Memory corruption
The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service memory corruption and crash or obtain...