Red Hat Security AdvisoryRHSA-2008:0029
XFree86 security update
Released 2008-01-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 XFree86-100dpi-fonts-4.3.0-126.EL, XFree86-100dpi-fonts-4.3.0-126.EL.i386, XFree86-4.3.0-126.EL +47
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 XFree86-100dpi-fonts-4.1.0-86.EL.i386, XFree86-100dpi-fonts-4.1.0-86.EL.ia64, XFree86-4.1.0-86.EL +37
- Red Hat Enterprise Linux AS version 3 XFree86-100dpi-fonts-4.3.0-126.EL, XFree86-100dpi-fonts-4.3.0-126.EL.i386, XFree86-100dpi-fonts-4.3.0-126.EL.ia64 +47
- Red Hat Enterprise Linux ES version 2.1 XFree86-100dpi-fonts-4.1.0-86.EL.i386, XFree86-4.1.0-86.EL, XFree86-4.1.0-86.EL.i386 +18
- Red Hat Enterprise Linux ES version 3 XFree86-100dpi-fonts-4.3.0-126.EL, XFree86-100dpi-fonts-4.3.0-126.EL.i386, XFree86-100dpi-fonts-4.3.0-126.EL.ia64 +47
- Red Hat Enterprise Linux WS version 2.1 XFree86-100dpi-fonts-4.1.0-86.EL.i386, XFree86-4.1.0-86.EL, XFree86-4.1.0-86.EL.i386 +18
- Red Hat Enterprise Linux WS version 3 XFree86-100dpi-fonts-4.3.0-126.EL, XFree86-100dpi-fonts-4.3.0-126.EL.i386, XFree86-100dpi-fonts-4.3.0-126.EL.ia64 +47
- Red Hat Linux Advanced Workstation 2.1 XFree86-100dpi-fonts-4.1.0-86.EL.ia64, XFree86-4.1.0-86.EL, XFree86-4.1.0-86.EL.ia64 +17
Fixes 7 records
Priority MEDIUM 47
The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerabili…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04278 · Published 2008-01-18 · Fixed CWE-787
Priority MEDIUM 46
The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.10737 · Published 2007-10-05 · Partial fix CWE-189
Priority MEDIUM 45
Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amoun…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02495 · Published 2008-01-18 · Fixed CWE-189
Priority MEDIUM 41
Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allows context-dependent attackers to execute arbitrary code via a PCF font with a la…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05108 · Published 2008-01-18 · Fixed CWE-119
Priority LOW 37
Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with craft…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03975 · Published 2007-10-05 · Partial fix CWE-119
Priority LOW 31
X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the fil…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05332 · Published 2008-01-18 · Fixed CWE-200
Priority LOW 26
The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit v…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01735 · Published 2008-01-18 · Fixed
THREATIST.IORead the docs