Unscored severity · published Jun 19, 2000
CVE-2000-0504
libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro
–
CVSS
3.3%
EPSS
No
On KEV
Description
libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
Gdm · Gnome
1.0; 1.1 · source: NVD
X
X · Open Group
11.0r5; 11.0r6; 11.0r6.1; 11.0r6.2; 11.0r6.3; 11.0r6.4 · source: NVD
X1
X11r6 · Xfree86 Project
3.3.3; 3.3.4; 3.3.5; 3.3.6; 4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0504
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0504
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-06/0170.html
Exploit
http://www.securityfocus.com/bid/1369
www.xfree86.org
http://www.xfree86.org/security/
More from Gdm
–
CVE-2011-1709
GNOME Display Manager (gdm) before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges…
–
CVE-2011-0727
GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under…
–
CVE-2009-2697
The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to…
–
CVE-2007-3381
The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from…
–
CVE-2006-6105
Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display Manager (gdm) allows local users to execute arbitrary code via format string…