Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2003-0063

security flaw

The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.

CVSS 3.1 · 7.3 High EPSS 3.4% KEV · Not listed
Vendors
Redhat Xfree86 Xfree86 Project
Products
Enterprise Linux Linux Xfree86 and 1 more
CVE-2011-2504

x11perfcomp has dot in its path

Untrusted search path vulnerability in x11perfcomp in XFree86 x11perf before 1.5.4 allows local users to gain privileges via unspecified Trojan horse code in the current working directory.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Xfree86
Products
Enterprise Linux X11perf
CVE-2012-1699

xorg-x11: DoS and information leak in xfs prior to X11R6.7

The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the SendErrToClient function with a mask value instead of a pointer, which allows local users to cause a denial of service (memory corruption and crash) or obtain potentially sensitive information from memory via a SetEventMask request that triggers an invalid pointer dereference.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
X Xfree86
Products
X.org X11 Xfree86