Xfree86 Project vulnerabilities

Products

• X11r6 27
• Xfree86 4
• X 2
• X Server 2

Newest

• x.org xserver, xfree86 project xfree86-misc +1 more Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context... CVE-2007-5760 Fix available 9.3 HighJanuary 18, 2008
• x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +5 more +7 more Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before... CVE-2007-1351 Fix available 8.5 HighApril 6, 2007
• x.org, xfree86 project xfree86 +1 more Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0,... CVE-2006-6103 Fix available 6.6 MediumDecember 31, 2006
• x.org, xfree86 project x server +1 more Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0... CVE-2006-6102 Fix available 10.0 HighDecember 31, 2006
• x.org, xfree86 project xfree86 +1 more Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9... CVE-2006-6101 Fix available 6.6 MediumDecember 31, 2006
• x.org, xfree86 project x +1 more Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local... CVE-2006-3740 Fix available 7.2 HighSeptember 13, 2006
• x.org, xfree86 project x +1 more Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to... CVE-2006-3739 Fix available 7.2 HighSeptember 13, 2006
• xfree86 project xfree86 Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute... CVE-2005-2495 Fix available 5.1 MediumSeptember 15, 2005
• altlinux alt linux, lesstif, mandrakesoft mandrake linux +7 more +9 more scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value... CVE-2005-0605 Fix available 7.5 HighMarch 2, 2005
• gentoo linux, lesstif, redhat fedora core +1 more +3 more Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages,... CVE-2004-0914 Fix available 10.0 HighDecember 10, 2004
• openbsd, suse linux, x.org x11r6 +2 more Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2)... CVE-2004-0688 7.5 HighSeptember 24, 2004
• openbsd, suse linux, x.org x11r6 +2 more Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in... CVE-2004-0687 7.5 HighSeptember 24, 2004
• xfree86 project xdm, gentoo linux, x.org x11r6 +2 more XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which... CVE-2004-0419 7.5 HighJune 3, 2004
• xfree86 project x11r6 Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service... CVE-2004-0094 7.5 HighFebruary 19, 2004
• xfree86 project x11r6 XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary... CVE-2004-0093 7.5 HighFebruary 19, 2004
• openbsd, xfree86 project x11r6 +1 more Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font... CVE-2004-0106 7.2 HighFebruary 16, 2004
• openbsd, xfree86 project x11r6 +1 more Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the... CVE-2004-0084 Public exploit EPSS 24.9% 10.0 HighFebruary 14, 2004
• openbsd, xfree86 project x11r6 +1 more Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users... CVE-2004-0083 Public exploit EPSS 21.2% 10.0 HighFebruary 14, 2004
• netbsd, xfree86 project x11r6 +1 more Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote... CVE-2003-0730 7.5 HighSeptember 3, 2003
• xfree86 project x server dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666)... CVE-2001-1409 3.6 LowJune 18, 2003
• xfree86 project x11r6 The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier... CVE-2003-0071 2.1 LowMarch 3, 2003
• xfree86, xfree86 project x11r6 +1 more The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window... CVE-2003-0063 7.5 HighMarch 3, 2003
• xfree86 project x11r6 xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X... CVE-2002-1510 10.0 HighMarch 3, 2003
• xfree86 project x11r6 Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid... CVE-2002-1472 7.2 HighMarch 3, 2003
• sun solaris, hp hp-ux, sgi irix +2 more +4 more Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9... CVE-2002-1317 Public exploit EPSS 24.0% 7.5 HighDecember 11, 2002
• xfree86 project x11r6 Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins... CVE-2001-0955 7.2 HighSeptember 22, 2001
• xfree86 project x11r6 xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose... CVE-2001-1179 7.2 HighJuly 17, 2001
• xfree86 project x11r6 Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment... CVE-2001-1178 Public exploit 7.2 HighJuly 11, 2001
• xfree86 project x11r6 XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when... CVE-2001-1086 Public exploit 7.5 HighJuly 4, 2001
• xfree86 project xlib Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands... CVE-2000-0976 Public exploit 4.6 MediumDecember 19, 2000
• xfree86 project xfce The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an ... CVE-2000-1060 4.6 MediumDecember 11, 2000
• open group x, xfree86 project x11r6 +1 more libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0,... CVE-2000-0620 5.0 MediumJune 19, 2000
• open group x, gnome gdm, xfree86 project x11r6 +2 more libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large... CVE-2000-0504 Public exploit 5.0 MediumJune 19, 2000
• michael jennings eterm, rxvt, putty +1 more +3 more xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape... CVE-2000-0476 Public exploit 5.0 MediumJune 1, 2000
• xfree86 project x11r6 XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in... CVE-2000-0453 Public exploit 5.0 MediumMay 18, 2000
• xfree86 project x11r6 Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long ... CVE-2000-0285 7.2 HighApril 16, 2000
• netbsd, redhat linux, xfree86 project x11r6 +2 more XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in... CVE-1999-0433 Public exploit 4.6 MediumMarch 21, 1999
• xfree86 project xfree86 SGI IRIX buffer overflow in xterm and Xaw allows root access. CVE-1999-0126 Public exploit 7.2 HighMay 3, 1998
• sgi irix, sun solaris, sunos +1 more +3 more Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through... CVE-1999-0241 10.0 HighNovember 1, 1995