Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 28

Export CSV
CVE-2004-0094

security flaw

Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI).

CVSS 2.0 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Redhat Xfree86 Project
Products
Enterprise Linux X11r6
CVE-2004-0419

security flaw

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.

CVSS 2.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Gentoo Redhat X.org and 1 more
Products
Linux Enterprise Linux X11r6 and 1 more
CVE-2004-0687

openmotif21 stack overflows in libxpm

Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.

CVSS 2.0 · 7.5 High EPSS 8.1% KEV · Not listed
Vendors
Openbsd Redhat Suse and 2 more
Products
Openbsd Enterprise Linux Network Satellite and 3 more
CVE-2004-0688

openmotif21 stack overflows in libxpm

Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.

CVSS 2.0 · 7.5 High EPSS 7.2% KEV · Not listed
Vendors
Openbsd Redhat Suse and 2 more
Products
Openbsd Enterprise Linux Network Satellite and 3 more
CVE-2004-0914

openmotif21 stack overflows in libxpm

Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.

CVSS 2.0 · 10.0 Critical EPSS 8.7% KEV · Not listed
Vendors
Gentoo Lesstif Redhat and 3 more
Products
Linux Lesstif Enterprise Linux and 5 more
CVE-2003-0063

security flaw

The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.

CVSS 3.1 · 7.3 High EPSS 3.4% KEV · Not listed
Vendors
Redhat Xfree86 Xfree86 Project
Products
Enterprise Linux Linux Xfree86 and 1 more