CVE-2007-4990

CVE-2007-4990 affects X.Org X Font Server (xfs) prior to 1.0.5. The vulnerability arises from the swap_char2b routine, where crafted size values in QueryXBitmaps/QueryXExtents heap-allocate data lead to heap corruption and potential arbitrary code execution. Connected advisories (e.g., RHSA/ELSA/...

CVE-2007-4568

CVE-2007-4568 affects X.Org X Font Server (xfs) up to version 1.0.4; the vulnerability is a heap-based overflow triggered by heap- and stack-unsafe handling of crafted size values in the build_range function, via the QueryXBitmaps and QueryXExtents protocol requests. Root cause is an integer over...