Red Hat Security Advisory

RHSA-2008:0031

xorg-x11-server security update

Released 2008-01-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) xorg-x11-server-1.1.1-48.26.el5_1.5, xorg-x11-server-Xdmx-1.1.1-48.26.el5_1.5, xorg-x11-server-Xdmx-1.1.1-48.26.el5_1.5.i386 +22
Red Hat Enterprise Linux Desktop (v. 5 client) xorg-x11-server-1.1.1-48.26.el5_1.5, xorg-x11-server-Xdmx-1.1.1-48.26.el5_1.5, xorg-x11-server-Xdmx-1.1.1-48.26.el5_1.5.i386 +8
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) xorg-x11-server-1.1.1-48.26.el5_1.5, xorg-x11-server-sdk-1.1.1-48.26.el5_1.5, xorg-x11-server-sdk-1.1.1-48.26.el5_1.5.i386

Fixes 5 records

TI-2007-06133 CVE-2007-6427 · GHSA-r7g2-76rh-rjm8

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to…

MEDIUM 47

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerabili…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04278 Published 2008-01-18 Fixed CWE-787

TI-2007-05528 CVE-2007-5760 · GHSA-6grr-7qqf-x376

Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows…

MEDIUM 46

Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03286 Published 2008-01-18 Fixed

TI-2007-06135 CVE-2007-6429 · GHSA-2r2g-x5x8-8vp7

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent…

MEDIUM 45

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amoun…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02495 Published 2008-01-18 Fixed CWE-189

TI-2007-05697 CVE-2007-5958 · GHSA-5jgc-m9p6-5f9w

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary…

LOW 31

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the fil…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.05332 Published 2008-01-18 Fixed CWE-200

TI-2007-06134 CVE-2007-6428 · GHSA-x5vw-mf64-c93p

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver…

LOW 26

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit v…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01735 Published 2008-01-18 Fixed