Red Hat Security AdvisoryRHSA-2008:0502
XFree86 security update
Released 2008-06-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 XFree86-100dpi-fonts-4.3.0-128.EL, XFree86-100dpi-fonts-4.3.0-128.EL.i386, XFree86-4.3.0-128.EL +47
- Red Hat Enterprise Linux AS version 3 XFree86-100dpi-fonts-4.3.0-128.EL, XFree86-100dpi-fonts-4.3.0-128.EL.i386, XFree86-100dpi-fonts-4.3.0-128.EL.ia64 +47
- Red Hat Enterprise Linux ES version 3 XFree86-100dpi-fonts-4.3.0-128.EL, XFree86-100dpi-fonts-4.3.0-128.EL.i386, XFree86-100dpi-fonts-4.3.0-128.EL.ia64 +47
- Red Hat Enterprise Linux WS version 3 XFree86-100dpi-fonts-4.3.0-128.EL, XFree86-100dpi-fonts-4.3.0-128.EL.i386, XFree86-100dpi-fonts-4.3.0-128.EL.ia64 +47
Fixes 4 records
Priority MEDIUM 45
Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to cal…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.03178 · Published 2008-06-16 · Fixed CWE-189
Priority MEDIUM 44
The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02699 · Published 2008-06-16 · Fixed CWE-189
Priority LOW 33
Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service (daemon crash) via unspecified request…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.01641 · Published 2008-06-16 · Fixed CWE-189
Priority LOW 33
Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and h…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.01387 · Published 2008-06-16 · Fixed CWE-189
THREATIST.IORead the docs