XP
Vendor
Xfree86 Project
39
CVEs
0
On KEV
0
New 30D
Products
X17.3
X11r6
Xfree86 Project
27 CVEs0 on KEV0 new
XF–
Xfree86
Xfree86 Project
4 CVEs0 on KEV0 new
XX–
Xfree86 X
Xfree86 Project
2 CVEs0 on KEV0 new
XX–
Xfree86 X Server
Xfree86 Project
2 CVEs0 on KEV0 new
XD–
Xdm
Xfree86 Project
1 CVEs0 on KEV0 new
XF–
Xfce
Xfree86 Project
1 CVEs0 on KEV0 new
XF–
Xfree86-misc
Xfree86 Project
1 CVEs0 on KEV0 new
XL–
Xlib
Xfree86 Project
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2007-5760 | XF Xfree86-misc Xfree86 Project | – | Jan 18 | Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via a PassMessage request containing a… |
| CVE-2007-1351 | X1 X11r6 Xfree86 Project | – | Apr 6 | Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to… |
| CVE-2006-6101 | XF Xfree86 Xfree86 Project | – | Dec 31 | Integer overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary… |
| CVE-2006-6103 | XF Xfree86 Xfree86 Project | – | Dec 31 | Integer overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code… |
| CVE-2006-6102 | XX Xfree86 X Server Xfree86 Project | – | Dec 31 | Integer overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0, 7.0, and 7.1, and XFree86 X server, allows local users to execute arbitrary code… |
| CVE-2006-3739 | XX Xfree86 X Xfree86 Project | – | Sep 13 | Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics (AFM) files with a modified… |
| CVE-2006-3740 | XX Xfree86 X Xfree86 Project | – | Sep 13 | Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with… |
| CVE-2005-2495 | XF Xfree86 Xfree86 Project | – | Sep 15 | Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image |
| CVE-2005-0605 | X1 X11r6 Xfree86 Project | – | Mar 2 | scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow |
| CVE-2004-0914 | X1 X11r6 Xfree86 Project | – | Jan 10 | Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3)… |
| CVE-2004-0687 | X1 X11r6 Xfree86 Project | – | Oct 20 | Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote… |
| CVE-2004-0688 | X1 X11r6 Xfree86 Project | – | Oct 20 | Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm… |
| CVE-2004-0419 | XD Xdm Xfree86 Project | – | Aug 18 | XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended… |
| CVE-2004-0094 | X1 X11r6 Xfree86 Project | – | Mar 15 | Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct… |
| CVE-2004-0093 | X1 X11r6 Xfree86 Project | – | Mar 15 | XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct… |
| CVE-2004-0083 | X1 X11r6 Xfree86 Project | – | Mar 3 | Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias)… |
| CVE-2004-0106 | X1 X11r6 Xfree86 Project | – | Mar 3 | Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084 |
| CVE-2004-0084 | X1 X11r6 Xfree86 Project | – | Mar 3 | Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute… |
| CVE-2003-0730 | X1 X11r6 Xfree86 Project | – | Oct 20 | Multiple integer overflows in the font libraries for XFree86 4.3.0 allow local or remote attackers to cause a denial of service or execute arbitrary code via heap-based and… |
| CVE-2001-1409 | XX Xfree86 X Server Xfree86 Project | – | Jul 24 | dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the root file system |
| CVE-2002-1510 | X1 X11r6 Xfree86 Project | – | Mar 3 | xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist |
| CVE-2003-0071 | X1 X11r6 Xfree86 Project | – | Mar 3 | The DEC UDK processing feature in the xterm terminal emulator in XFree86 4.2.99.4 and earlier allows attackers to cause a denial of service via a certain character escape sequence… |
| CVE-2003-0063 | X1 X11r6 Xfree86 Project | 7.3 | Mar 3 | The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command… |
| CVE-2002-1472 | X1 X11r6 Xfree86 Project | – | Mar 3 | Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a modified LD_PRELOAD… |
| CVE-2002-1317 | X1 X11r6 Xfree86 Project | – | Dec 11 | Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary… |
| CVE-2001-0955 | X1 X11r6 Xfree86 Project | – | Sep 22 | Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a… |
| CVE-2001-1179 | X1 X11r6 Xfree86 Project | – | Jul 17 | xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters |
| CVE-2001-1178 | X1 X11r6 Xfree86 Project | – | Jul 11 | Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable |
| CVE-2001-1086 | X1 X11r6 Xfree86 Project | – | Jul 4 | XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized… |
| CVE-2000-0976 | XL Xlib Xfree86 Project | – | Dec 19 | Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter |
| CVE-2000-1060 | XF Xfce Xfree86 Project | – | Dec 11 | The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" command in the xinitrc program, which allows local users to… |
| CVE-2000-0620 | X1 X11r6 Xfree86 Project | – | Jun 19 | libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite loop |
| CVE-2000-0504 | X1 X11r6 Xfree86 Project | – | Jun 19 | libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP_STRING macro |
| CVE-2000-0476 | X1 X11r6 Xfree86 Project | – | Jun 1 | xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized |
| CVE-2000-0453 | X1 X11r6 Xfree86 Project | – | May 18 | XFree86 3.3.x and 4.0 allows a user to cause a denial of service via a negative counter value in a malformed TCP packet that is sent to port 6000 |
| CVE-2000-0285 | X1 X11r6 Xfree86 Project | – | Apr 16 | Buffer overflow in XFree86 3.3.x allows local users to execute arbitrary commands via a long -xkbmap parameter |
| CVE-1999-0433 | X1 X11r6 Xfree86 Project | – | Mar 21 | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a… |
| CVE-1999-0126 | XF Xfree86 Xfree86 Project | – | May 3 | SGI IRIX buffer overflow in xterm and Xaw allows root access |
| CVE-1999-0241 | X1 X11r6 Xfree86 Project | – | Nov 1 | Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g |