Home Corporate Website Jobs Mailing Lists RSS Blog New entry Advertise
	Software Inspectors   Scan Online   Personal (PSI)   Network (NSI 2.0)   - NEW - Solutions For   Security Professionals   Security Vendors Free Solutions For   Open Communities   Journalists & Media Secunia Advisories   Search   Historic Advisories   Listed By Product   Listed By Vendor   Statistics / Graphs   Secunia Research   Report Vulnerability   About Advisories Virus Information   Chronological List   Last 10 Virus Alerts   About Virus Information Secunia Customers   Customer Area CVE Reference: CVE-2007-4568 NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. Original Page at CVE MITRE: CVE-2007-4568 Description: Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow. CVE Status: Candidate References: XF   http://xforce.iss.net/xforce/xfdb/36919 SUSE   http://www.novell.com/linux/security/advisories/2007_54_xorg.html SUNALERT   http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1   http://sunsolve.sun.com/search/document.do?assetkey=1-66-200642-1 ST   1018763 SAID   Secunia Advisory: SA27168   Secunia Advisory: SA27060   Secunia Advisory: SA27052   Secunia Advisory: SA27040   Secunia Advisory: SA27176   Secunia Advisory: SA27240   Secunia Advisory: SA27560   Secunia Advisory: SA27228   Secunia Advisory: SA28004   Secunia Advisory: SA28536   Secunia Advisory: SA28542   Secunia Advisory: SA28891   Secunia Advisory: SA29420 REDHAT   http://www.redhat.com/support/errata/RHSA-2008-0030.html   http://www.redhat.com/support/errata/RHSA-2008-0029.html MLIST   http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html MANDRIVA   http://www.mandriva.com/security/advisories?name=MDKSA-2007:210 IDEFENSE   http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602 GENTOO   http://security.gentoo.org/glsa/glsa-200710-11.xml FEDORA DEBIAN   http://www.debian.org/security/2007/dsa-1385 CONFIRM   http://docs.info.apple.com/article.html?artnum=307562   http://docs.info.apple.com/article.html?artnum=307430   http://bugs.gentoo.org/show_bug.cgi?id=194606   http://bugs.freedesktop.org/show_bug.cgi?id=12298 CERT   http://www.us-cert.gov/cas/techalerts/TA08-043B.html BUGTRAQ   http://www.securityfocus.com/archive/1/archive/1/481432/100/0/threaded BID   25898 APPLE   http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html   http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html Return to the previous page. Secunia PSI Scan | Patch | Track Free Download Secunia Poll Do you think it's important to read Setup/User Guides for applications for use within your network? Yes, I do it all the time Yes, but I do it rarely No See Results    Most Popular Advisories 1. Yahoo! Assistant yNotifier.dll ActiveX Control Code Execution 2. OpenKM Document Export Security Issue 3. vShare YouTube Clone "tid" SQL Injection Vulnerability 4. Zarafa Script Insertion Vulnerabilities 5. Maian Recipe Cross-Site Scripting Vulnerabilities 6. Cyberfolio "rep" File Inclusion Vulnerability 7. SazCart Multiple File Inclusion Vulnerabilities 8. Maian Guestbook footer.php Cross-Site Scripting Vulnerabilities 9. Ubuntu update for vorbis-tools 10. TFTP Server SP Long Error Message Buffer Overflow
Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia