1440 matches found
X.Org X server: Composite local privilege escalation
Background The X Window System is a graphical windowing system based on a client/server model. Description Aaron Plattner discovered a buffer overflow in the compNewPixmap function when copying data from a large pixel depth pixmap into a smaller pixel depth pixmap. Impact A local attacker could...
USN-514-1: X.org vulnerability
Aaron Plattner discovered that the Composite extension did not correctly calculate the size of buffers when copying between different bit depths. An authenticated user could exploit this to execute arbitrary code with root privileges...
Debian DSA-1372-1 : xorg-server - buffer overflow
Aaron Plattner discovered a buffer overflow in the Composite extension of the X.org X server, which can lead to local privilege escalation. The oldstable distribution sarge is not affected by this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
[SECURITY] [DSA 1372-1] New xorg-server packages fix privilege escalation
-------------------------------------------------------------------------- Debian Security Advisory DSA 1372-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 9th, 2007 http://www.debian.org/security/faq -...
DSA-1372-1 xorg-server - privilege escalation
Bulletin has no description...
Security fix for the ALT Linux 10 package xorg-server version 2:1.3.0.0-alt2
April 30, 2007 Valery Inozemtsev 2:1.3.0.0-alt2 - Mesa-6.5.3 - fixed CVE-2007-1356...
xserver XC-MISC integer overflow
Integer overflow in ALLOCATELOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server xserver 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption...
Security fix for the ALT Linux 10 package xorg-server version 2:1.2.99.903-alt3
April 3, 2007 Valery Inozemtsev 2:1.2.99.903-alt3 - fixed CVE-2007-1003: XC-MISC Extension ProcXCMiscGetXIDList Memory Corruption...
X.Org X server: Multiple vulnerabilities
Background The X Window System is a graphical windowing system based on a client/server model. Description Multiple memory corruption vulnerabilities have been found in the ProcDbeGetVisualInfo and the ProcDbeSwapBuffers of the DBE extension, and ProcRenderAddGlyphs in the Render extension. Impac...
DSA-1249-1 xfree86
Bulletin has no description...
Security fix for the ALT Linux 10 package xorg-server version 2:1.1.99.903-alt5
Jan. 9, 2007 Valery Inozemtsev 2:1.1.99.903-alt5 - security fix CVE-2006-6101, CVE-2006-6102, CVE-2006-6103 - added Mesa-6.5.2-git-PolygonMode-bug9578.patch, xorg-server-1.1.99.901-glXDRIbindTexImage-target.patch, xorg-server-1.1.99.903-dont-backfill-bg-none.patch,...
DSA-1193-1 xfree86
Bulletin has no description...
security flaw
Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...
Slackware 10.1 / 10.2 / current : xorg server overflow (SSA:2006-123-01)
New xorg and xorg-devel packages are available for Slackware 10.1, 10.2, and -current to fix a security issue. A typo in the X render extension in X.Org 6.8.0 or later allows an X client to crash the server and possibly to execute arbitrary code as the X server user typically this is 'root'...
FreeBSD : X11 server -- pixmap allocation vulnerability (a863aa74-24be-11da-8882-000e0c33c2dc)
Allocating large pixmaps by a client can trigger an integer overflow in the X server, potentially leading to execution of arbitrary code with elevated root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from t...
FreeBSD : xorg-server -- privilege escalation (61534682-b8f4-11da-8e62-000e0c33c2dc)
Daniel Stone of X.Org reports : During the analysis of results from the Coverity code review of X.Org, we discovered a flaw in the server that allows local users to execute arbitrary code with root privileges, or cause a denial of service by overwriting files on the system, again with root...
Security fix for the ALT Linux 10 package xorg-server version 1:1.0.2-alt5
May 3, 2006 Valery Inozemtsev 1:1.0.2-alt5 - xorg-x11-6.9.0-CVE-2006-1526.patch...
DEBIAN-CVE-2006-0745
X.Org server xorg-server 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and 1 execute arbitrary code via the -modulepath command line optio...
CVE-2006-0745
The CVE concerns the X.Org X Server (xorg-server) 1.0.0 and later (X11R6.9.0, X11R7.0) where a faulty check tests the address of geteuid instead of the function result, allowing a local user to bypass restrictions and perform a Local Privilege Escalation. Impact described across sources: an unpri...
xorg-server -- privilege escalation
Daniel Stone of X.Org reports: During the analysis of results from the Coverity code review of X.Org, we discovered a flaw in the server that allows local users to execute arbitrary code with root privileges, or cause a denial of service by overwriting files on the system, again with root...