PT-2005-3397 · Xfree86+2 · Xfree86+2

Luke Hutchison + 1 · Publicado 2005-09-13 · Atualizado 2018-10-19 · CVE-2005-2495

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions XFree86 versions prior to 4.3.0

Description The issue is related to multiple integer overflows that can be triggered by a crafted pixmap image, potentially allowing user-assisted attackers to execute arbitrary code.

Recommendations For versions prior to 4.3.0, update to version 4.3.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2005-2495

DSA-816-1

HPSBUX02137

RHSA-2005:396

RHSA-2005:501

RHSA-2005_396

RHSA-2005_501

Produtos afetados

Hp-Ux

Red Hat

Xfree86

Referências · 44

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A998 · Nota
• http://secunia.com/advisories/17215 · Aviso do Fabricante
• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.22/SCOSA-2006.22.txt · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9615 · Nota
• http://secunia.com/advisories/19796 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2005_23_sr.html · Aviso do Fabricante
• http://securityfocus.com/archive/1/442163/100/0/threaded · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101953-1 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22244 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1044 · Nota
• http://securityfocus.com/advisories/9286 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2005-501.html · Aviso do Fabricante
• ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U · Aviso do Fabricante
• http://secunia.com/advisories/16790 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2005_56_xserver.html · Aviso do Fabricante