Denial Of Service (DoS)

libX11.so is vulnerable to Denial Of Service DoS. The vulnerability exists due to a memory corruption in multiple functions of src/InitExt.c because they do not check array limits properly causing an out-of-bounds which allows an attacker to crash the application...

Denial Of Service (DoS)

libX11.so is vulnerable to denial of service DoS attacks. A malicious user can pass a reply where the first string overflows the number of bytes transmitted, causing a variable to be set NULL, crashing the application...

Out-Of-Bounds Write

libX11.so is vulnerable to an out-of-bounds write. The server response consisting of a length byte followed by the actual string is not NULL-terminated, which could lead to an off-by-one override in the functions XGetFontPath, XListExtensions and XListFonts, and result in an out-of-bounds write...

CVE-2002-1472

CVE-2002-1472 describes an untrusted search path vulnerability in XFree86’s libX11.so used by setuid/setgid programs. A local attacker can leverage a modified LD_PRELOAD to point to a malicious module and gain root privileges; impact is local privilege escalation. The vulnerability is associated ...

CVE-2002-1472: Undefined Security Weakness

Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a modified LDPRELOAD environment variable that points to a malicious module...