This update fixes multiple vulnerabilities reported by iDefense :

  - CVE-2008-2360 - RENDER Extension heap buffer overflow

  - CVE-2008-2361 - RENDER Extension crash

  - CVE-2008-2362 - RENDER Extension memory corruption 

  - CVE-2008-1379 - MIT-SHM arbitrary memory read

  - CVE-2008-1377 - RECORD and Security extensions memory     corruption

This update fixes multiple vulnerabilities reported by iDefense :

  - RENDER Extension heap buffer overflow. (CVE-2008-2360)

  - RENDER Extension crash. (CVE-2008-2361)

  - RENDER Extension memory corruption . (CVE-2008-2362)

  - MIT-SHM arbitrary memory read. (CVE-2008-1379)

  - RECORD and Security extensions memory corruption.
    (CVE-2008-1377)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0504 advisory.

    [1.1.1-48.41.0.1.el5_2.1]
    - Added Enterprise Linux detection

    [1.1.1-48.41.1]
    - cve-2008-1377.patch: Record and Security Extension Input validation
    - cve-2008-1379.patch: MIT-SHM extension Input Validation flaw
    - cve-2008-2360.patch: Render AllocateGlyph extension Integer overflows
    - cve-2008-2361.patch: Render CreateCursor extension Integer overflows
    - cve-2008-2362.patch: Render Gradient extension Integer overflows

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update fixes multiple vulnerabilities reported by iDefense :

  - CVE-2008-2360 - RENDER Extension heap buffer overflow

  - CVE-2008-2361 - RENDER Extension crash

  - CVE-2008-2362 - RENDER Extension memory corruption 

  - CVE-2008-1379 - MIT-SHM arbitrary memory read

  - CVE-2008-1377 - RECORD and Security extensions memory     corruption Additionally fixes for :

  - XvReputImage crashes due to Nulled PortPriv->pDraw

  - gnome-screensaver loses keyboard focus lock under compiz     (CVE-2007-3920)

This update fixes multiple vulnerabilities reported by iDefense for the included X server :

  - CVE-2008-2360 - RENDER Extension heap buffer overflow

  - CVE-2008-2361 - RENDER Extension crash

  - CVE-2008-2362 - RENDER Extension memory corruption 

  - CVE-2008-1379 - MIT-SHM arbitrary memory read

  - CVE-2008-1377 - RECORD and Security extensions memory     corruption

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
40158	openSUSE Security Update : xorg-x11-Xvnc (xorg-x11-Xvnc-36)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	critical
41215	SuSE9 Security Update : XFree86 (YOU Patch Number 12170)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	critical
67702	Oracle Linux 5 : xorg-x11-server (ELSA-2008-0504)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	critical
33165	openSUSE 10 Security Update : xorg-x11-Xvnc (xorg-x11-Xvnc-5317)	Nessus	SuSE Local Security Checks	2008/6/12	2021/1/14	critical
34302	openSUSE 10 Security Update : xgl (xgl-5526)	Nessus	SuSE Local Security Checks	2008/9/28	2021/1/14	critical

检测

插件搜索

critical

critical

critical

critical

critical