Red Hat Security AdvisoryRHSA-2008:0504
xorg-x11-server security update
Released 2008-06-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) xorg-x11-server-1.1.1-48.41.el5_2.1, xorg-x11-server-Xdmx-1.1.1-48.41.el5_2.1, xorg-x11-server-Xdmx-1.1.1-48.41.el5_2.1.i386 +22
- Red Hat Enterprise Linux Desktop (v. 5 client) xorg-x11-server-1.1.1-48.41.el5_2.1, xorg-x11-server-Xdmx-1.1.1-48.41.el5_2.1, xorg-x11-server-Xdmx-1.1.1-48.41.el5_2.1.i386 +8
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) xorg-x11-server-1.1.1-48.41.el5_2.1, xorg-x11-server-sdk-1.1.1-48.41.el5_2.1, xorg-x11-server-sdk-1.1.1-48.41.el5_2.1.i386
Fixes 5 records
Priority MEDIUM 49
Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGr…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03566 · Published 2008-06-16 · Fixed CWE-189
Priority MEDIUM 45
Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to cal…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.03178 · Published 2008-06-16 · Fixed CWE-189
Priority MEDIUM 44
The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3…
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.02699 · Published 2008-06-16 · Fixed CWE-189
Priority LOW 33
Integer overflow in the ProcRenderCreateCursor function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to cause a denial of service (daemon crash) via unspecified request…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.01641 · Published 2008-06-16 · Fixed CWE-189
Priority LOW 33
Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and h…
CVSS 2.0MEDIUM 6.8· Network · Low privileges · Interaction — · EPSS 0.01387 · Published 2008-06-16 · Fixed CWE-189