Skip to content

Xfree86 Project X11r6 vulnerabilities

x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +5 more +7 moreInteger overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before...CVE-2007-1351Fix available8.5 HighApril 6, 2007
altlinux alt linux, lesstif, mandrakesoft mandrake linux +7 more +9 morescan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value...CVE-2005-0605Fix available7.5 HighMarch 2, 2005
gentoo linux, lesstif, redhat fedora core +1 more +3 moreMultiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages,...CVE-2004-0914Fix available10.0 HighDecember 10, 2004
openbsd, suse linux, x.org x11r6 +2 moreMultiple integer overflows in (1) the xpmParseColors function in parse.c, (2)...CVE-2004-06887.5 HighSeptember 24, 2004
openbsd, suse linux, x.org x11r6 +2 moreMultiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in...CVE-2004-06877.5 HighSeptember 24, 2004
xfree86 project x11r6Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service...CVE-2004-00947.5 HighFebruary 19, 2004
xfree86 project x11r6XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary...CVE-2004-00937.5 HighFebruary 19, 2004
openbsd, xfree86 project x11r6 +1 moreMultiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font...CVE-2004-01067.2 HighFebruary 16, 2004
openbsd, xfree86 project x11r6 +1 moreBuffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the...CVE-2004-0084Public exploitEPSS 24.9%10.0 HighFebruary 14, 2004
openbsd, xfree86 project x11r6 +1 moreBuffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users...CVE-2004-0083Public exploitEPSS 21.2%10.0 HighFebruary 14, 2004
netbsd, xfree86 project x11r6 +1 moreMultiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote...CVE-2003-07307.5 HighSeptember 3, 2003
xfree86 project x11r6The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier...CVE-2003-00712.1 LowMarch 3, 2003
xfree86, xfree86 project x11r6 +1 moreThe xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window...CVE-2003-00637.5 HighMarch 3, 2003
xfree86 project x11r6xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X...CVE-2002-151010.0 HighMarch 3, 2003
xfree86 project x11r6Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid...CVE-2002-14727.2 HighMarch 3, 2003
sun solaris, hp hp-ux, sgi irix +2 more +4 moreBuffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9...CVE-2002-1317Public exploitEPSS 24.0%7.5 HighDecember 11, 2002
xfree86 project x11r6Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins...CVE-2001-09557.2 HighSeptember 22, 2001
xfree86 project x11r6xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose...CVE-2001-11797.2 HighJuly 17, 2001
xfree86 project x11r6Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment...CVE-2001-1178Public exploit7.2 HighJuly 11, 2001
xfree86 project x11r6XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when...CVE-2001-1086Public exploit7.5 HighJuly 4, 2001
open group x, xfree86 project x11r6 +1 morelibX11 X library allows remote attackers to cause a denial of service via a resource mask of 0,...CVE-2000-06205.0 MediumJune 19, 2000
open group x, gnome gdm, xfree86 project x11r6 +2 morelibICE in XFree86 allows remote attackers to cause a denial of service by specifying a large...CVE-2000-0504Public exploit5.0 MediumJune 19, 2000
michael jennings eterm, rxvt, putty +1 more +3 morexterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape...CVE-2000-0476Public exploit5.0 MediumJune 1, 2000
xfree86 project x11r6XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in...CVE-2000-0453Public exploit5.0 MediumMay 18, 2000
xfree86 project x11r6Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long ...CVE-2000-02857.2 HighApril 16, 2000
netbsd, redhat linux, xfree86 project x11r6 +2 moreXFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in...CVE-1999-0433Public exploit4.6 MediumMarch 21, 1999
sgi irix, sun solaris, sunos +1 more +3 moreGuessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through...CVE-1999-024110.0 HighNovember 1, 1995