Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libxfont, xorg-server vulnerabilities (USN-571-1)

Multiple overflows were discovered in the XFree86-Misc, XInput-Misc, TOG-CUP, EVI, and MIT-SHM extensions which did not correctly validate function arguments. An authenticated attacker could send specially crafted requests and gain root privileges. CVE-2007-5760, CVE-2007-6427, CVE-2007-6428,...

openSUSE 10 Security Update : xorg-x11-Xnest (xorg-x11-Xnest-4859)

This update fixes various Xserver security issues. File existence disclosure vulnerability CVE-2007-5958. XInput Extension Memory Corruption Vulnerability IDEF2888 CVE-2007-6427. TOG-CUP Extension Memory Corruption Vulnerability IDEF2901 CVE-2007-6428. EVI Extension Integer Overflow Vulnerability...

Xorg / XFree86 PCF font parser buffer overflow

Buffer overflow in 1 X.Org Xserver before 1.4.1, and 2 the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCFBDFENCODINGS...

Xorg / XFree86 PCF font parser buffer overflow

Buffer overflow in 1 X.Org Xserver before 1.4.1, and 2 the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a large difference between the last col and first col values in the PCFBDFENCODINGS...

Debian Security Advisory DSA 1193-1 (xfree86)

The remote host is missing an update to xfree86 announced via advisory DSA 1193-1. Several vulnerabilities have been discovered in the X Window System, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following...

Important: xorg-x11 security update

6.8.2-1.EL.33.0.1.0.1 - Add Enterprise Linux detection - Add XFree86-4.3.0-oracle-bug-report-address-update.patch 6.8.2-1.EL.33.0.1 - cve-2007-4568.patch: XFS Integer Overflow Vulnerability - cve-2007-5760.patch: XFree86-Misc Extension Invalid Array Index Vulnerability - cve-2007-5958.patch: Xorg...

SuSE 10 Security Update : xorg-x11-server (ZYPP Patch Number 1913)

This security update fixes crashes in the PCF handling, which might be used to crash the Xserver using applications or even to execute code in them. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

openSUSE 10 Security Update : NX (NX-4555)

The XFree code contained in NX was prone to integer overflows CVE-2006-1861 and insufficiently protected against specially crafted PCF files CVE-2006-3467. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : xorg-x11-server (xorg-x11-server-1914)

This security update fixes crashes in the PCF handling, which might be used to crash the Xserver using applications or even to execute code in them. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE 10 Security Update : freetype2 (freetype2-1910)

This security update fixes crashes in the PCF handling of freetype2 which might be used to crash freetype2 using applications or even to execude code in them. This issue is tracked by the Mitre CVE ID CVE-2006-3467. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

GLSA-200710-09 : NX 2.1: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200710-09 NX 2.1: User-assisted execution of arbitrary code Chris Evans reported an integer overflow within the FreeType PCF font file parser CVE-2006-1861. NX and NX Node are vulnerable to this due to shipping XFree86 4.3.0, whic...

NX 2.1: User-assisted execution of arbitrary code

Background NoMachine's NX establishes remote connections to X11 desktops over small bandwidth links. NX and NX Node are the compression core libraries, whereas NX is used by FreeNX and NX Node by the binary-only NX servers. Description Chris Evans reported an integer overflow within the FreeType...

Mandrake Linux Security Advisory : xorg-x11 (MDKSA-2006:148)

An integer overflow flaw was discovered in how xorg-x11/XFree86 handles PCF files. A malicious authorized client could exploit the issue to cause a DoS crash or potentially execute arbitrary code with root privileges on the xorg-x11/XFree86 server. Updated packages are patched to address this...

FreeType LWFN文件处理远程缓冲区溢出漏洞

FreeType是一个流行的字体函数库。 FreeType在处理PCF字体时存在整数溢出，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果用户受骗使用链接到FreeType的应用程序加载了特制的字体文件的话，就会导致拒绝服务或执行任意代码。 FreeType FreeType 2.2.1 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1178-1）以及相应补丁: DSA-1178-1：New freetype packages fix execution of arbitrary code...

Debian DSA-1193-1 : xfree86 - several vulnerabilities

Several vulnerabilities have been discovered in the X Window System, which may lead to the execution of arbitrary code or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-3467 Chris Evan discovered an integer overflow in the code t...

DSA-1193-1 xfree86

Bulletin has no description...

DSA-1178-1 freetype

Bulletin has no description...

LibXfont: Multiple integer overflows

Background libXfont is the X.Org Xfont library, some parts are based on the FreeType code base. Description Several integer overflows have been found in the PCF font parser. Impact A local attacker could possibly execute arbitrary code or crash the Xserver by enticing a user to load a specially...

XFree86 security update

CentOS Errata and Security Advisory CESA-2006:0635 Updated XFree86 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an implementation of the...

XFree86 security update

CentOS Errata and Security Advisory CESA-2006:0635-01 Updated XFree86 packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having important security impact by the Red Hat Security Response Team. XFree86 is an implementation of...