CVE-2007-4568 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-4568
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-4568

Description: Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/36919 SUSE http://www.novell.com/linux/security/advisories/2007_54_xorg.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200642-1 ST 1018763 SAID Secunia Advisory: SA27168 Secunia Advisory: SA27060 Secunia Advisory: SA27052 Secunia Advisory: SA27040 Secunia Advisory: SA27176 Secunia Advisory: SA27240 Secunia Advisory: SA27560 Secunia Advisory: SA27228 Secunia Advisory: SA28004 Secunia Advisory: SA28536 Secunia Advisory: SA28542 Secunia Advisory: SA28891 Secunia Advisory: SA29420 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0030.html http://www.redhat.com/support/errata/RHSA-2008-0029.html MLIST http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:210 IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602 GENTOO http://security.gentoo.org/glsa/glsa-200710-11.xml FEDORA DEBIAN http://www.debian.org/security/2007/dsa-1385 CONFIRM http://docs.info.apple.com/article.html?artnum=307562 http://docs.info.apple.com/article.html?artnum=307430 http://bugs.gentoo.org/show_bug.cgi?id=194606 http://bugs.freedesktop.org/show_bug.cgi?id=12298 CERT http://www.us-cert.gov/cas/techalerts/TA08-043B.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/481432/100/0/threaded BID 25898 APPLE http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Return to the previous page.