CVE-2013-4396

CVE-2013-4396 describes a use-after-free in the X.Org X11 server’s ImageText handling (dix/dixfonts.c: doImageText) that affects xorg-server before 1.14.4. A crafted ImageText request could trigger memory-allocation failure, enabling remote authenticated users to cause a daemon crash or potential...

CVE-2012-0064

CVE-2012-0064 : xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, allowing physically proximate attackers to bypass an X screen lock via keyboard combinations that break the input grab. Affected: xkeyboard-config < 2.5 and X.Org

CVE-2012-1699

The CVE-2012-1699 entry concerns the xfs font server (Difs) in X.Org X11R6 up to 6.6 and XFree86 before 3.3.3. The root cause is that ProcSetEventMask in difs/events.c calls SendErrToClient with a mask value instead of a pointer. This can allow local users to cause memory corruption and a crash o...