CVE-2007-5760

CVE-2007-5760 involves an array index error in the XFree86-Misc extension of X.Org Xserver prior to 1.4.1. The underlying flaw is an invalid array index in a PassMessage request, which context-dependent attackers could exploit to execute arbitrary code. Affected software is X.Org Xserver (XFree86...

CVE-2007-6429

CVE-2007-6429 is a vulnerability in the X.Org Xserver (pre-1.4.1) involving integer overflows in the EVI and MIT-SHM extensions that could lead to arbitrary code execution. The initial description indicates memory allocation based on a 32-bit value in GetVisualInfo and shared-memory management de...

CVE-2007-5958

CVE-2007-5958 affects X.Org Xserver (pre-1.4.1) where the -sp option can leak existence of files by returning different error messages depending on whether the file exists. The vulnerability is a local information disclosure vulnerability in security-policy file handling, exposing partial confide...

CVE-2008-0006

CVE-2008-0006 is a buffer overflow in the X.Org X server and its PCF font handling (libXfont/libfont). The flaw occurs when processing PCF_BDF_ENCODINGS where lastCol-firstCol > 255, enabling a context-dependent attacker to potentially execute arbitrary code or crash the X server. Public advis...

CVE-2007-6428

CVE-2007-6428: In the X.Org Xserver TOG-CUP extension, ProcGetReservedColormapEntries allows a context-dependent attacker to read arbitrary memory via a 32-bit value used as an array index (vulnerable in X.Org Xserver before 1.4.1). Impact: partial information disclosure. Concrete details appear ...

CVE-2007-2437

CVE-2007-2437 affects the X render (Xrender) extension in X.org X Window System 7.0/7.1/7.2 with Xserver 1.3.0 and earlier. The vulnerability arises when processing crafted values in the functions XRenderCompositeTrapezoids and XRenderAddTraps , which can trigger a divide-by-zero error and cause ...