PT-2010-1110 · Freetype +2 · Freetype +2

Name of the Vulnerable Software and Affected Versions: FreeType versions prior to 2.4.0 FreeType versions prior to 2.4.8 Description: The issue is related to an integer overflow in the gray render span function in smooth/ftgrays.c, which allows remote attackers to cause a denial of service or...

Sourcefabric Campsite Articles - HTML Injection

source: https://www.securityfocus.com/bid/41780/info Sourcefabric Campsite is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied HTML and script code ...

CentOS 5 : xorg-x11-server (CESA-2010:0382)

Updated xorg-x11-server packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

RedHat Update for xorg-x11-server RHSA-2010:0382-01

Check for the Version of xorg-x11-server OpenVAS Vulnerability Test RedHat Update for xorg-x11-server RHSA-2010:0382-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

RedHat Update for xorg-x11-server RHSA-2010:0382-01

Check for the Version of xorg-x11-server OpenVAS Vulnerability Test RedHat Update for xorg-x11-server RHSA-2010:0382-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

CVE-2010-1166

CVE-2010-1166 details (connected documents): The fault lies in the X.Org X11 server Render extension’s fbComposite implementation (fbpict.c), where an incorrect macro definition can lead to memory corruption, enabling denial of service or possibly remote code execution for remote-authenticated us...

CVE-2010-1166

The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service memory corruption and daemon crash or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition...

Xorg: X server Render extension memory corruption

The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a denial of service memory corruption and daemon crash or possibly execute arbitrary code via a crafted request, related to an incorrect macro definition...

xorg-x11-server security update

1.1.1-48.76.0.1.el55.1 - Added oracle-enterprise-detect.patch - Replaced 'Red Hat' in spec file 1.1.1-48.76.1 - xserver-1.1.1-mod-macro-parens.patch: Fix insufficient parentheses in Render and arc computation code. 495733...

SuSE9 Security Update : XFree86 (YOU Patch Number 12170)

This update fixes multiple vulnerabilities reported by iDefense : - RENDER Extension heap buffer overflow. CVE-2008-2360 - RENDER Extension crash. CVE-2008-2361 - RENDER Extension memory corruption . CVE-2008-2362 - MIT-SHM arbitrary memory read. CVE-2008-1379 - RECORD and Security extensions...

openSUSE Security Update : xgl (xgl-155)

This update fixes multiple vulnerabilities reported by iDefense for the included X server : - CVE-2008-2360 - RENDER Extension heap buffer overflow - CVE-2008-2361 - RENDER Extension crash - CVE-2008-2362 - RENDER Extension memory corruption - CVE-2008-1379 - MIT-SHM arbitrary memory read -...

Mandriva Linux Security Advisory : metisse (MDVSA-2008:179)

An input validation flaw was found in X.org's MIT-SHM extension. A client connected to the X.org server could read arbitrary server memory, resulting in the disclosure of sensitive data of other users of the X.org server CVE-2008-1379. Multiple integer overflows were found in X.org's Render...

Mandriva Update for x11-server MDVSA-2008:116 (x11-server)

Check for the Version of x11-server OpenVAS Vulnerability Test Mandriva Update for x11-server MDVSA-2008:116 x11-server Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Mandriva Update for metisse MDVSA-2008:179 (metisse)

Check for the Version of metisse OpenVAS Vulnerability Test Mandriva Update for metisse MDVSA-2008:179 metisse Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for x11-server MDVSA-2008:116 (x11-server)

Check for the Version of x11-server OpenVAS Vulnerability Test Mandriva Update for x11-server MDVSA-2008:116 x11-server Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Ubuntu: Security Advisory (USN-403-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for xorg-server vulnerabilities USN-616-1

Ubuntu Update for Linux kernel vulnerabilities USN-616-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6161.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for xorg-server vulnerabilities USN-616-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CentOS Update for XFree86 CESA-2008:0512-01 centos2 i386

Check for the Version of XFree86 OpenVAS Vulnerability Test CentOS Update for XFree86 CESA-2008:0512-01 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Zend Framework -- Local File Inclusion vulnerability in Zend_View::render()

Matthew Weier O'Phinney reports: A potential Local File Inclusion LFI vulnerability exists in the ZendView::render method. If user input is used to specify the script path, then it is possible to trigger the LFI. Note that Zend Framework applications that never call the ZendView::render method wi...

SuSE 10 Security Update : Xgl (ZYPP Patch Number 5528)

This update fixes multiple vulnerabilities reported by iDefense for the included X server : - RENDER Extension heap buffer overflow. CVE-2008-2360 - RENDER Extension crash. CVE-2008-2361 - RENDER Extension memory corruption. CVE-2008-2362 - MIT-SHM arbitrary memory read. CVE-2008-1379 - RECORD an...