5302 matches found
FreeBSD : xorg -- multiple vulnerabilities (fe2b6597-c9a4-11dc-8da8-0008a18a9961)
Matthieu Herrb of X.Org reports : Several vulnerabilities have been identified in server code of the X window system caused by lack of proper input validation on user controlled data in various parts of the software, causing various kinds of overflows. Exploiting these overflows will crash the X...
Fedora 8 : xorg-x11-server-1.3.0.0-39.fc8 (2008-0760)
CVE-2007-5760: XFree86-Misc Extension Invalid Array Index Vulnerability CVE-2007-5958: Xorg / XFree86 file existence disclosure vulnerability CVE-2007-6427: XInput Extension Memory Corruption Vulnerability CVE-2007-6428: TOG-CUP Extension Memory Corruption Vulnerability CVE-2007-6429: EVI and...
Debian DSA-1466-1 : xorg-server - several vulnerabilities
The X.org fix for CVE-2007-6429 introduced a regression in the MIT-SHM extension, which prevented the start of a few applications. This update provides updated packages for the xfree86 version included in Debian old stable sarge in addition to the fixed packages for Debian stable etch, which were...
Fedora 7 : xorg-x11-server-1.3.0.0-16.fc7 (2008-0956)
When enabling the 'unredirect fullscreen windows' option, compiz will unredirect fullscreen windows to improve performace. However, unredirecting will as a side effect break any grabs on that window, which compromises most screensavers. This X server update suppresses this unintended side effect...
openSUSE 10 Security Update : xorg-x11-Xvnc (xorg-x11-Xvnc-4933)
The previous xorg-x11 security update contained a flaw. Due to this some applications using the X shared memory extension did not work properly anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...
[SECURITY] Fedora 7 Update: xorg-x11-server-1.3.0.0-15.fc7
X.Org X11 X server...
[SECURITY] Fedora 8 Update: xorg-x11-server-1.3.0.0-39.fc8
X.Org X11 X server...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : xorg-server regression (USN-571-2)
USN-571-1 fixed vulnerabilities in X.org. The upstream fixes were incomplete, and under certain situations, applications using the MIT-SHM extension e.g. Java, wxWidgets would crash with BadAlloc X errors. This update fixes the problem. We apologize for the inconvenience. Multiple overflows were...
DTSA-110-1 xorg-server - multiple vulnerabilities
Bulletin has no description...
xorg security update
CentOS Errata and Security Advisory CESA-2008:0031 Updated xorg-x11-server packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 18th January 2008 Th...
DEBIAN-CVE-2007-6428
The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index...
DEBIAN-CVE-2007-6429
Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via 1 a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or 2 a request containing valu...
USN-571-1: X.org vulnerabilities
Multiple overflows were discovered in the XFree86-Misc, XInput-Misc, TOG-CUP, EVI, and MIT-SHM extensions which did not correctly validate function arguments. An authenticated attacker could send specially crafted requests and gain root privileges. CVE-2007-5760, CVE-2007-6427, CVE-2007-6428,...
xorg security update
CentOS Errata and Security Advisory CESA-2008:0030 Updated xorg-x11 packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 18th January 2008 The...
openSUSE 10 Security Update : xorg-x11-Xnest (xorg-x11-Xnest-4859)
This update fixes various Xserver security issues. File existence disclosure vulnerability CVE-2007-5958. XInput Extension Memory Corruption Vulnerability IDEF2888 CVE-2007-6427. TOG-CUP Extension Memory Corruption Vulnerability IDEF2901 CVE-2007-6428. EVI Extension Integer Overflow Vulnerability...
Security fix for the ALT Linux 10 package xorg-server version 2:1.4.0.90-alt6
Jan. 18, 2008 Valery Inozemtsev 2:1.4.0.90-alt6 - CVE-2007-6429: Don't spuriously reject <8bpp shm pixmaps...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libxfont, xorg-server vulnerabilities (USN-571-1)
Multiple overflows were discovered in the XFree86-Misc, XInput-Misc, TOG-CUP, EVI, and MIT-SHM extensions which did not correctly validate function arguments. An authenticated attacker could send specially crafted requests and gain root privileges. CVE-2007-5760, CVE-2007-6427, CVE-2007-6428,...
Xorg / XFree86 file existence disclosure vulnerability
X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists...
Xorg / XFree86 PCF font parser buffer overflow
Buffer overflow in 1 X.Org Xserver before 1.4.1, and 2 the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCFBDFENCODINGS...
xfree86: memory corruption via XInput extension
The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990...