An input validation flaw was discovered in X.org's Security and Record extensions. A malicious authorized client could exploit this issue to cause a denial of service (crash) or, potentially, execute arbitrary code with root privileges on the X.Org server. (CVE-2008-1377)

Multiple integer overflow flaws were found in X.org's Render extension. A malicious authorized client could exploit these issues to cause a denial of service (crash) or, potentially, execute arbitrary code with root privileges on the X.Org server. (CVE-2008-2360, CVE-2008-2361)

An input validation flaw was discovered in X.org's MIT-SHM extension.
A client connected to the X.org server could read arbitrary server memory. This could result in the sensitive data of other users of the X.org server being disclosed. (CVE-2008-1379)

This update fixes multiple vulnerabilities reported by iDefense :

  - CVE-2008-2360 - RENDER Extension heap buffer overflow

  - CVE-2008-2361 - RENDER Extension crash

  - CVE-2008-2362 - RENDER Extension memory corruption 

  - CVE-2008-1379 - MIT-SHM arbitrary memory read

  - CVE-2008-1377 - RECORD and Security extensions memory     corruption

This update fixes multiple vulnerabilities reported by iDefense :

  - RENDER Extension heap buffer overflow. (CVE-2008-2360)

  - RENDER Extension crash. (CVE-2008-2361)

  - RENDER Extension memory corruption . (CVE-2008-2362)

  - MIT-SHM arbitrary memory read. (CVE-2008-1379)

  - RECORD and Security extensions memory corruption.
    (CVE-2008-1377)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0503 advisory.

  - X.org Record and Security extensions memory corruption (CVE-2008-1377)

  - X.org MIT-SHM extension arbitrary memory read (CVE-2008-1379)

  - X.org Render extension AllocateGlyph() heap buffer overflow (CVE-2008-2360)

  - X.org Render extension ProcRenderCreateCursor() crash (CVE-2008-2361)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update fixes multiple vulnerabilities reported by iDefense for the included X server :

  - RENDER Extension heap buffer overflow. (CVE-2008-2360)

  - RENDER Extension crash. (CVE-2008-2361)

  - RENDER Extension memory corruption. (CVE-2008-2362)

  - MIT-SHM arbitrary memory read. (CVE-2008-1379)

  - RECORD and Security extensions memory corruption.
    (CVE-2008-1377)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
60420	Scientific Linux Security Update : XFree86 on SL3.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
40158	openSUSE Security Update : xorg-x11-Xvnc (xorg-x11-Xvnc-36)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	critical
41215	SuSE9 Security Update : XFree86 (YOU Patch Number 12170)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	critical
33152	RHEL 4 : xorg-x11 (RHSA-2008:0503)	Nessus	Red Hat Local Security Checks	2008/6/12	2024/4/21	critical
34303	SuSE 10 Security Update : Xgl (ZYPP Patch Number 5528)	Nessus	SuSE Local Security Checks	2008/9/28	2021/1/14	critical

检测

插件搜索

high

critical

critical

critical

critical