RSS   Vulnerabilities for 'X font server'   RSS

2007-10-05
 
CVE-2007-4990

CWE-189
 

 
The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.

 
 
CVE-2007-4568

CWE-189
 

 
Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.

 

 >>> Vendor: X.org 34 Products
Xfree86
X11r6
X11
Xterm
XDM
X.org
X11r7
Emu-linux-x87-xlibs
Xf86dga
Xinit
Xload
Xorg-server
Libx11
Libxfont
X window system
Xserver
X font server
Xinput
Tog-cup
EVI
Mit-shm
X server
X.org x11
Libxfixes
Libxi
Libxinerama
Libxrandr
Libxrender
Libxv
Libxvmc
Libxtst
X.org-server
X.xorg-server
Libxdmcp


Copyright 2024, cxsecurity.com

 

Back to Top