XFree86 / X.Org / NX multiple security vulnerabilities updated since 20.01.2008
Published:		08.04.2008
Source:		BUGTRAQ
SecurityVulns ID:		8583
Type:		local
Level:		7/10
Description:		XInput and TOG-CUP extensions memory corruption, EVI and MIT-SHM extensions integer overflows, multiple extensions array index overflows. libxfont PCF fonts parsing buffer overflow.

Affected:		NX : nx 3.1
CVE:		CVE-2008-0006
		CVE-2007-6429
		CVE-2007-6428
		CVE-2007-6427
		CVE-2007-5958
		CVE-2007-5760

Original document		GENTOO, [ GLSA 200804-05 ] NX: User-assisted execution of arbitrary code (08.04.2008)
		UBUNTU, [USN-571-1] X.org vulnerabilities (20.01.2008)
		IDEFENSE, iDefense Security Advisory 01.17.08: Multiple Vendor X Server XFree86-Misc Extension Invalid Array Index Vulnerability (20.01.2008)
		IDEFENSE, iDefense Security Advisory 01.17.08: Multiple Vendor X Server EVI and MIT-SHM Extensions Integer Overflow Vulnerabilities (20.01.2008)
		IDEFENSE, iDefense Security Advisory 01.17.08: Multiple Vendor X Server TOG-CUP Extension Information Disclosure Vulnerability (20.01.2008)
		IDEFENSE, iDefense Security Advisory 01.17.08: Multiple Vendor X Server XInput Extension Multiple Memory Corruption Vulnerabilities (20.01.2008)

Discuss:

Read or add your comments to this news (0 comments)