PT-2005-3397 · Xfree86+2 · Xfree86+2

Luke Hutchison + 1 · Published 2005-09-13 · Updated 2018-10-19 · CVE-2005-2495

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions XFree86 versions prior to 4.3.0

Description The issue is related to multiple integer overflows that can be triggered by a crafted pixmap image, potentially allowing user-assisted attackers to execute arbitrary code.

Recommendations For versions prior to 4.3.0, update to version 4.3.0 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2005-2495

DSA-816-1

HPSBUX02137

RHSA-2005:396

RHSA-2005:501

RHSA-2005_396

RHSA-2005_501

Affected Products

Hp-Ux

Red Hat

Xfree86

References · 44

• http://secunia.com/advisories/17215 · Vendor Advisory
• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.22/SCOSA-2006.22.txt · Vendor Advisory
• http://secunia.com/advisories/19796 · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_23_sr.html · Vendor Advisory
• http://securityfocus.com/archive/1/442163/100/0/threaded · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101953-1 · Vendor Advisory
• http://securityfocus.com/advisories/9286 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-501.html · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U · Vendor Advisory
• http://secunia.com/advisories/16790 · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_56_xserver.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101926-1 · Vendor Advisory
• http://securityfocus.com/advisories/9285 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=112690609622266&w=2 · Vendor Advisory
• http://secunia.com/advisories/17278 · Vendor Advisory