Security fix for the ALT Linux 10 package xorg-server version 2:1.3.0.0-alt2

April 30, 2007 Valery Inozemtsev 2:1.3.0.0-alt2 - Mesa-6.5.3 - fixed CVE-2007-1356...

xserver XC-MISC integer overflow

Integer overflow in ALLOCATELOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server xserver 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption...

Security fix for the ALT Linux 10 package xorg-server version 2:1.2.99.903-alt3

April 3, 2007 Valery Inozemtsev 2:1.2.99.903-alt3 - fixed CVE-2007-1003: XC-MISC Extension ProcXCMiscGetXIDList Memory Corruption...

X.Org X server: Multiple vulnerabilities

Background The X Window System is a graphical windowing system based on a client/server model. Description Multiple memory corruption vulnerabilities have been found in the ProcDbeGetVisualInfo and the ProcDbeSwapBuffers of the DBE extension, and ProcRenderAddGlyphs in the Render extension. Impac...

DSA-1249-1 xfree86

Bulletin has no description...

Security fix for the ALT Linux 10 package xorg-server version 2:1.1.99.903-alt5

Jan. 9, 2007 Valery Inozemtsev 2:1.1.99.903-alt5 - security fix CVE-2006-6101, CVE-2006-6102, CVE-2006-6103 - added Mesa-6.5.2-git-PolygonMode-bug9578.patch, xorg-server-1.1.99.901-glXDRIbindTexImage-target.patch, xorg-server-1.1.99.903-dont-backfill-bg-none.patch,...

DSA-1193-1 xfree86

Bulletin has no description...

security flaw

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

FreeBSD : X11 server -- pixmap allocation vulnerability (a863aa74-24be-11da-8882-000e0c33c2dc)

Allocating large pixmaps by a client can trigger an integer overflow in the X server, potentially leading to execution of arbitrary code with elevated root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from t...

Slackware 10.1 / 10.2 / current : xorg server overflow (SSA:2006-123-01)

New xorg and xorg-devel packages are available for Slackware 10.1, 10.2, and -current to fix a security issue. A typo in the X render extension in X.Org 6.8.0 or later allows an X client to crash the server and possibly to execute arbitrary code as the X server user typically this is 'root'...

FreeBSD : xorg-server -- privilege escalation (61534682-b8f4-11da-8e62-000e0c33c2dc)

Daniel Stone of X.Org reports : During the analysis of results from the Coverity code review of X.Org, we discovered a flaw in the server that allows local users to execute arbitrary code with root privileges, or cause a denial of service by overwriting files on the system, again with root...

Security fix for the ALT Linux 10 package xorg-server version 1:1.0.2-alt5

May 3, 2006 Valery Inozemtsev 1:1.0.2-alt5 - xorg-x11-6.9.0-CVE-2006-1526.patch...

DEBIAN-CVE-2006-0745

X.Org server xorg-server 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and 1 execute arbitrary code via the -modulepath command line optio...

CVE-2006-0745

The CVE concerns the X.Org X Server (xorg-server) 1.0.0 and later (X11R6.9.0, X11R7.0) where a faulty check tests the address of geteuid instead of the function result, allowing a local user to bypass restrictions and perform a Local Privilege Escalation. Impact described across sources: an unpri...

xorg-server -- privilege escalation

Daniel Stone of X.Org reports: During the analysis of results from the Coverity code review of X.Org, we discovered a flaw in the server that allows local users to execute arbitrary code with root privileges, or cause a denial of service by overwriting files on the system, again with root...