CVE-1999-0526

CVE-1999-0526 relates to an X server with access control disabled (e.g., via xhost +), allowing any host to connect to the X server. The vulnerability is documented with a high impact: confidentiality, integrity, and availability could be compromised through to keystroke exposure and session take...

CVE-1999-0965

CVE-1999-0965 is a race condition in xterm that allows local users to modify arbitrary files via the logging option. The vulnerability is documented across multiple sources (NVD, RH, MSRC, cve.org) as a local-privilege impact tied to xterm’s logging feature. Root cause stated as a race condition;...

CVE-2014-8091

CVE-2014-8091 affects the X.Org X Window System server (X.Org X11, X.Org Server) prior to 1.16.3. The issue arises when using SUN-DES-1 (Secure RPC) credentials: malloc’s return value is not checked, enabling a remote attacker to trigger a denial of service via a crafted connection request, resul...

CVE-2013-7439

CVE-2013-7439 affects X.Org libX11 and the X11R6.x include/X11/Xlibint.h, where multiple off-by-one errors in the MakeBigReq and SetReqLen macros can allow a remote attacker to trigger a buffer overflow. The vulnerability exists in libX11 prior to version 1.6.0. Impact as stated: unspecified in d...

CVE-2014-8098

Affected software: X.Org X Window System (X.Org Server), GLX extension in X.Org X server prior to version 1.16.3. Root cause: several functions exposed via the GLX and other X11 core protocol paths accept crafted length or index values, enabling out-of-bounds read/write that could crash the serve...

CVE-2014-8095

CVE-2014-8095 affects X.Org X Server/X11R4 and later up to versions before 1.16.3. A crafted length or index value to a large set of X server/extension handlers (including XInput, DRI2/GLX, Render, XFixes, XI/others) can cause out-of-bounds reads/writes, leading to Denial of Service and potential...

CVE-2007-1003

The CVE-2007-1003 issue affects the X.Org X11 server (xserver) 7.1-1.1.0 and earlier builds up to 20070403, due to an integer overflow in ALLOCATE_LOCAL within ProcXCMiscGetXIDList in the XC-MISC extension. This memory corruption could allow a remote authenticated user to execute arbitrary code. ...

CVE-2014-8092

Summary (CVE-2014-8092) : The X.Org X Server (X.Org X Window System) before version 1.16.3 is affected. The issue arises from multiple integer overflows and out-of-bounds memory access during handling of X11 core requests (notably in ProcPutImage, GetHosts, RegionSizeof, and various other functio...

CVE-2014-8102

CVE-2014-8102 affects the X.Org X Window System's XFixes extension: SProcXFixesSelectSelectionInput in the XFixes extension of X.Org X Server versions before 1.16.3. A remote authenticated user can trigger an out-of-bounds read or write, leading to denial of service or potentially executing arbit...

CVE-2014-8093

CVE-2014-8093 affects X.Org X Server (GLX extension) with multiple integer overflows in GLX handling that trigger out-of-bounds reads/writes and can crash the server or enable arbitrary code execution when a crafted request is issued by a remote, authenticated client. The issue impacts components...

CVE-2014-8097

CVE-2014-8097 is a vulnerability in the X.Org X Server DBE extension present in X.Org X Window System before 1.16.3. It allows remote authenticated users to trigger an out-of-bounds read or write via a crafted length or index value to the DBE-related functions (DbeSwapBuffers family), potentially...

CVE-2014-8101

CVE-2014-8101 affects the RandR extension of X.Org X Server (X11) prior to 1.16.3. A remote authenticated user can trigger an out-of-bounds read/write via crafted length or index values in SProcRRQueryVersion, SProcRRGetScreenInfo, SProcRRSelectInput, or SProcRRConfigureOutputProperty, potentiall...

CVE-2014-8096

CVE-2014-8096 affects the X.Org X Server (XC-MISC SProcXCMiscGetXIDList function) prior to 1.16.3. A crafted length or index value by a remote, authenticated client can cause an out-of-bounds read/write, potentially leading to denial of service or arbitrary code execution. Remediation: upgrade to...

CVE-2014-8100

CVE-2014-8100 affects X.Org X Server (and the X Render extension) prior to 1.16.3. A crafted length/index value to multiple Render-related handlers can trigger out-of-bounds read/write, enabling remote authenticated users to cause denial of service or potentially execute arbitrary code. Affected ...

CVE-2014-8099

The connected documents confirm CVE-2014-8099 is among a set of X.Org X server vulnerabilities affecting the XVideo extension. The issues arise from out-of-bounds reads/writes and integer overflow when handling certain memory/length values in various Xv-related SProc and related extension functio...

CVE-2012-2118

CVE-2012-2118 affects X.Org X11 / xorg-server 1.11 with a format-string vulnerability in LogVHdrMessageVerb() in os/log.c that could cause a denial of service or potentially allow arbitrary code execution via input device name. Public disclosures describe the vulnerability and multiple advisories...

CVE-2009-2711

CVE-2009-2711 details an XScreenSaver vulnerability in Sun Solaris 9/10 and related X11 servers (Solaris 8/9/10, OpenSolaris) where popup windows can be read by a physically proximate attacker even when the screen is locked (different from CVE-2009-1276). Connected sources show Solaris patch upda...

CVE-2009-3100

CVE-2009-3100 affects xscreensaver (Gnome-XScreenSaver) on Solaris 9/10, OpenSolaris snv_109–snv_122, and X11 6.4.1 on Solaris 8. The vulnerability stems from improper handling of Accessibility support, enabling a local user to cause a denial of service (system hang) by locking the screen and the...