Browse CVEs

MEDIUM 5.1 CVE-2005-2495 Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image. Xfree86 Mitigation only Fix from $1,6002005-09-15 HIGH 7.5 CVE-2004-0093 XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using th… X11r6 Patch available Fix from $1,9502004-03-15 HIGH 7.5 CVE-2004-0094 Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX… X11r6 Patch available Fix from $1,9502004-03-15 HIGH 10.0 CVE-2004-0083EPSS 21% Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via … X11r6 Patch available Fix from $1,9502004-03-03 HIGH 10.0 CVE-2004-0084EPSS 25% Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authent… X11r6 Patch available Fix from $1,9502004-03-03 HIGH 7.2 CVE-2004-0106 Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2… X11r6 Patch available Fix from $1,9502004-03-03 HIGH 7.5 CVE-2003-0730EPSS 6% Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary … X11r6 Patch available Fix from $1,9502003-10-20 HIGH 10.0 CVE-2002-1510 xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist. X11r6 Mitigation only Fix from $1,9502003-03-03 HIGH 7.3 CVE-2003-0063 The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then… X11r6 Mitigation only Fix from $1,9502003-03-03 HIGH 7.2 CVE-2002-1472 Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a… X11r6 Patch available Fix from $1,9502003-03-03 HIGH 7.5 CVE-2002-1317EPSS 24% Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (… X11r6 Patch available Fix from $1,9502002-12-11 HIGH 7.2 CVE-2001-0955 Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and … X11r6 Patch available Fix from $1,9502001-09-22 HIGH 7.2 CVE-2001-1179 xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters. X11r6 No fix yet Fix from $1,9502001-07-17 HIGH 7.2 CVE-2001-1178 Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable. X11r6 Mitigation only Fix from $1,9502001-07-11 HIGH 7.5 CVE-2001-1086 XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote a… X11r6 Patch available Fix from $1,9502001-07-04 MEDIUM 5.0 CVE-2000-0453 XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000. X11r6 Mitigation only Fix from $1,6002000-05-18 HIGH 7.2 CVE-2000-0285 Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter. X11r6 No fix yet Fix from $1,9502000-04-16 HIGH 7.2 CVE-1999-0126 SGI IRIX buffer overflow in xterm and Xaw allows root access. Xfree86 Mitigation only Fix from $1,9501998-05-03 HIGH 10.0 CVE-1999-0241 Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. X11r6 Mitigation only Fix from $1,9501995-11-01