CVE-2013-4396

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted ImageText request that triggers...

CVE-2013-4396

CVE-2013-4396 describes a use-after-free in the X.Org X11 server’s ImageText handling (dix/dixfonts.c: doImageText) that affects xorg-server before 1.14.4. A crafted ImageText request could trigger memory-allocation failure, enabling remote authenticated users to cause a daemon crash or potential...

CVE-2013-4396

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted ImageText request that triggers...

CVE-2013-4396

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted ImageText request that triggers...

PT-2013-1242

Name of the Vulnerable Software and Affected Versions xorg-server versions prior to 1.14.4 xorg-server versions prior to 1.14.3-r2 Description The issue is related to a use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module. This vulnerability can be...

CVE-2013-4396: Undefined Security Weakness

Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted ImageText request that triggers...

xorg-server -- use-after-free

Alan Coopersmith reports: Pedro Ribeiro pedrib at gmail.com reported an issue to the X.Org security team in which an authenticated X client can cause an X server to use memory after it was freed, potentially leading to crash and/or memory corruption...

Amazon Linux AMI : xorg-x11-server (ALAS-2012-104)

A flaw was found in the way the X.Org server handled lock files. A local user with access to the system console could use this flaw to determine the existence of a file in a directory not accessible to the user, via a symbolic link attack. CVE-2011-4028 A race condition was found in the way the...

SuSE 11.3 Security Update : xorg-x11-libXt (SAT Patch Number 7940)

This update of xorg-x11-libXt fixes several integer and buffer overflow issues. Bug 815451/821670 CVE-2013-2002 / CVE-2013-2005 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itse...

SuSE 11.3 Security Update : xorg-x11-libXrender (SAT Patch Number 7939)

This update of xorg-x11-libXrender fixes several integer overflow issues. Bug 815451/821669 CVE-2013-1987 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...

SuSE 11.3 Security Update : xorg-x11-libXfixes (SAT Patch Number 7937)

This update of xorg-x11-libXfixes fixed a integer overflow issue. Bug 815451/821667 CVE-2013-1983 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11.3 Security Update : xorg-x11-libs (SAT Patch Number 7944)

This update of xorg-x11-libs fixes several integer and buffer overflow issues. Bug 815451/821663 CVE-2013-1984 / CVE-2013-1985 / CVE-2013-1986 / CVE-2013-1988 / CVE-2013-1990 / CVE-2013-1991 / CVE-2013-1992 / CVE-2013-1995 / CVE-2013-1996 / CVE-2013-1998 / CVE-2013-1999 / CVE-2013-2000 /...

SuSE 11.3 Security Update : xorg-x11-libXext (SAT Patch Number 7931)

This update of xorg-x11-libXext fixes several integer overflow issues. Bug 815451/821665 CVE-2013-1982 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 11.3 Security Update : xorg-x11-libXv (SAT Patch Number 7943)

This update of xorg-x11-libXv fixes several integer and buffer overflow issues. Bug 815451/821671 CVE-2013-1989 / CVE-2013-2066 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itse...

Oracle Linux 4 : xorg-x11 (ELSA-2007-0003)

From Red Hat Security Advisory 2007:0003 : Updated X.org packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. X.org is an open source implementation of the X Windo...

Oracle Linux 5 / 6 : xorg-x11-server-utils (ELSA-2011-0433)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-0433 advisory. 7.4-15.el60.1 - cve-2011-0465: Sanitize cpp macro expansion. CVE 2011-0465 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 4 : xorg-x11 (ELSA-2007-0898)

From Red Hat Security Advisory 2007:0898 : Updated X.org packages that correct a flaw in X.Org's composite extension are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. X.org is an open source...

Oracle Linux 5 / 6 : xorg-x11-server (ELSA-2011-1359)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1359 advisory. 1.7.7-29.2 - cve-2011-4818.patch: Multiple input sanitization flaws in GLX and Render Tenable has extracted the preceding description block directl...

Oracle Linux 4 : xorg-x11 (ELSA-2008-0030)

From Red Hat Security Advisory 2008:0030 : Updated xorg-x11 packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 18th January 2008 The original...

SuSE 10 Security Update : xorg-x11 (ZYPP Patch Number 8623)

This update of xorg-x11 fixes several security vulnerabilities. - Bug 815451- X.Org Security Advisory: May 23, 2013 - Bug 821664 - libX11 - Bug 821671 - libXv - Bug 821670 - libXt - Bug 821669 - libXrender - Bug 821668 - libXp - Bug 821667 - libXfixes - Bug 821665 - libXext - Bug 821663 - libFS,...