CveMateVulnerability intelligence

X.Org vulnerabilities, page 2

194 vulnerabilities

Known vulnerabilities in X.Org products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 35 products.

CVE-2007-1667canonicalubuntu_linux+1019y ago24-03-2007 21:00

Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow.CVE-2007-1003debianxorg-server+919y ago06-04-2007 01:00

Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0, and other versions before 20070403, allows remote authenticated users to execute arbitrary code via a large expression, which results in memory corruption.CVE-2007-1352debianlibxfont+1219y ago06-04-2007 01:00

Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.CVE-2007-4568opensusexorg-x11&distro=openSUSE Tumbleweed+119y ago05-10-2007 21:00

Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.CVE-2007-4990x.orgx_font_server19y ago05-10-2007 21:00

The swap_char2b function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.CVE-2007-4730debianxorg-server+1919y ago11-09-2007 19:00

Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.CVE-2007-5760debianxorg-server+118y ago18-01-2008 22:00

Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a large array index.CVE-2007-5958debianxorg-server+118y ago18-01-2008 22:00

X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the X program, which produces different error messages depending on whether the filename exists.CVE-2007-6429debianxorg-server+118y ago18-01-2008 22:00

Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo request containing a 32-bit value that is improperly used to calculate an amount of memory for allocation by the EVI extension, or (2) a request containing values related to pixmap size that are improperly used in management of shared memory by the MIT-SHM extension.CVE-2007-6427applemac_os_x+1118y ago18-01-2008 22:00

The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte swapping and heap corruption within multiple functions, a different vulnerability than CVE-2007-4990.CVE-2007-6428debianxorg-server+118y ago18-01-2008 22:00

The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to read the contents of arbitrary memory locations via a request containing a 32-bit value that is improperly used as an array index.CVE-2016-7948alpinelibxrandr+49y ago13-12-2016 20:00

X.org libXrandr before 1.5.1 allows remote X servers to trigger out-of-bounds write operations by leveraging mishandling of reply data.CVE-2016-7945alpinelibxi+49y ago13-12-2016 20:00

Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields.CVE-2016-7943alpinelibx11+49y ago13-12-2016 20:00

The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations.CVE-2016-7949debianlibxrender+39y ago13-12-2016 20:00

Multiple buffer overflows in the (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXrender before 0.9.10 allow remote X servers to trigger out-of-bounds write operations via vectors involving length fields.CVE-2016-7942alpinelibx11+169y ago13-12-2016 20:00

The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations.CVE-2016-7952alpinelibxtst+49y ago13-12-2016 20:00

X.org libXtst before 1.2.3 allows remote X servers to cause a denial of service (infinite loop) via a reply in the (1) XRecordStartOfData, (2) XRecordEndOfData, or (3) XRecordClientDied category without a client sequence and with attached data.CVE-2016-7947alpinelibxrandr+59y ago13-12-2016 20:00

Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response.CVE-2016-7944alpinelibxfixes+79y ago13-12-2016 20:00

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and get out of sync.CVE-2016-7950debianlibxrender+39y ago13-12-2016 20:00

The XRenderQueryFilters function in X.org libXrender before 0.9.10 allows remote X servers to trigger out-of-bounds write operations via vectors involving filter name lengths.