X1
Product
X11r6
27
CVEs
0
On KEV
7.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add X11r6 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2003-0063 | 7.3 | Mar 3 | The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command… Affected: 4.0; 4.0.1; 4.0.3; 4.1.0; 4.2.0; 4.2.1 |
| CVE-2007-1351 | – | Apr 6 | Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to… Affected: 4.3.0; 4.3.0.1; 4.3.0.2 |
| CVE-2005-0605 | – | Mar 2 | scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow Affected: 3.3; 3.3.2; 3.3.3; 3.3.4; 3.3.5; 3.3.6; +13 more |
| CVE-2004-0914 | – | Jan 10 | Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3)… Affected: 3.3; 3.3.2; 3.3.3; 3.3.4; 3.3.5; 3.3.6; +11 more |
| CVE-2004-0688 | – | Oct 20 | Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm… Affected: 3.3.6; 4.0; 4.0.1; 4.0.2.11; 4.0.3; 4.1.0; +6 more |
| CVE-2004-0687 | – | Oct 20 | Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote… Affected: 3.3.6; 4.0; 4.0.1; 4.0.2.11; 4.0.3; 4.1.0; +6 more |
| CVE-2004-0094 | – | Mar 15 | Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct… Affected: 4.1.0; 4.1.11; 4.1.12; 4.2.0; 4.2.1; 4.2.1; +1 more |
| CVE-2004-0093 | – | Mar 15 | XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct… Affected: 4.1.0; 4.1.11; 4.1.12; 4.2.0; 4.2.1; 4.2.1; +1 more |
| CVE-2004-0106 | – | Mar 3 | Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084 Affected: 4.1.0; 4.1.11; 4.1.12; 4.2.0; 4.2.1; 4.2.1; +1 more |
| CVE-2004-0084 | – | Mar 3 | Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute… Affected: 4.1.0; 4.1.11; 4.1.12; 4.2.0; 4.2.1; 4.2.1; +1 more |
| CVE-2004-0083 | – | Mar 3 | Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias)… Affected: 4.1.0; 4.1.11; 4.1.12; 4.2.0; 4.2.1; 4.2.1; +1 more |
| CVE-2003-0730 | – | Oct 20 | Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and… Affected: 4.2.1; 4.3.0 |
| CVE-2002-1510 | – | Mar 3 | xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist Affected: All versions, or not specified |
| CVE-2002-1472 | – | Mar 3 | Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a modified LD_PRELOAD… Affected: 4.1.0; 4.2.0 |
| CVE-2003-0071 | – | Mar 3 | The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause a denial of service via a certain character escape sequence… Affected: 4.0; 4.0.1; 4.0.3; 4.1.0; 4.2.0; 4.2.1 |
| CVE-2002-1317 | – | Dec 11 | Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary… Affected: 3.3; 3.3.2; 3.3.3; 3.3.4; 3.3.5 |
| CVE-2001-0955 | – | Sep 22 | Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a… Affected: 4.0; 4.0.1; 4.0.3 |
| CVE-2001-1179 | – | Jul 17 | xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters Affected: 3.3.2 |
| CVE-2001-1178 | – | Jul 11 | Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable Affected: 3.3.2 |
| CVE-2001-1086 | – | Jul 4 | XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized… Affected: 3.3; 3.3.3 |
| CVE-2000-0504 | – | Jun 19 | libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro Affected: 3.3.3; 3.3.4; 3.3.5; 3.3.6; 4.0 |
| CVE-2000-0620 | – | Jun 19 | libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop Affected: 3.3.3; 3.3.4; 3.3.5; 3.3.6; 4.0 |
| CVE-2000-0476 | – | Jun 1 | xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized Affected: 3.3.3; 4.0 |
| CVE-2000-0453 | – | May 18 | XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000 Affected: 3.3.5; 3.3.6; 4.0 |
| CVE-2000-0285 | – | Apr 16 | Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter Affected: 3.3.6; 4.0 |
| CVE-1999-0433 | – | Mar 21 | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a… Affected: 3.3.3 |
| CVE-1999-0241 | – | Nov 1 | Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g Affected: All versions, or not specified |
Showing 27