PT-2008-6888 · Debian+4 · Xfonts-75Dpi-Transcoded+91

Takuya Shiozaki · Published 1970-01-01 · Updated 2024-06-15 · CVE-2008-0006

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xorg-server versions prior to 1.4.1 libfont and libXfont libraries (affected versions not specified) x-window-system (affected versions not specified) xfonts-75dpi-transcoded (affected versions not specified) libxfont1-dbg (affected versions not specified) libxaw6-dev (affected versions not specified) xlibs (affected versions not specified) libxaw6-dbg (affected versions not specified) libxrandr2-dbg (affected versions not specified) xdmx-tools (affected versions not specified) xlibmesa-dev (affected versions not specified) xutils (affected versions not specified) xlibmesa3-dbg (affected versions not specified) libdps-dev (affected versions not specified) xlibmesa3 (affected versions not specified) libx11-6 (affected versions not specified) libxi6 (affected versions not specified) libxaw7-dbg (affected versions not specified) xvfb (affected versions not specified) xlibmesa-glu-dev (affected versions not specified) libx11-dev (affected versions not specified) libxext-dev (affected versions not specified) libxp6 (affected versions not specified) xfwp (affected versions not specified) libxrandr-dev (affected versions not specified) libxp-dev (affected versions not specified) xlibosmesa4-dbg (affected versions not specified) libdps1-dbg (affected versions not specified) xlibosmesa-dev (affected versions not specified) libxpm4-dbg (affected versions not specified) xfonts-100dpi-transcoded (affected versions not specified) xfonts-75dpi (affected versions not specified) xfonts-cyrillic (affected versions not specified) xnest (affected versions not specified) pm-dev (affected versions not specified) xlibmesa-gl (affected versions not specified) xfonts-scalable (affected versions not specified) libxmuu1-dbg (affected versions not specified) libsm-dev (affected versions not specified) xfree86-common (affected versions not specified) xlibmesa-glu-dbg (affected versions not specified) xlibosmesa4 (affected versions not specified) xdm (affected versions not specified) xlibmesa-glu (affected versions not specified) x-dev (affected versions not specified) libdps1 (affected versions not specified) libxfont1 (affected versions not specified) libxtst6 (affected versions not specified) xmh (affected versions not specified) libxv1 (affected versions not specified) libxtrap-dev (affected versions not specified) libxrandr2 (affected versions not specified) xfonts-100dpi (affected versions not specified) libxt-dev (affected versions not specified) libxpm-dev (affected versions not specified) libxfont-dev (affected versions not specified) libxtst-dev (affected versions not specified) xlibmesa-dri (affected versions not specified) libxmu6 (affected versions not specified) xfonts-base-transcoded (affected versions not specified) proxymngr (affected versions not specified) libxv-dev (affected versions not specified) libxt6 (affected versions not specified) libsm6 (affected versions not specified) libxaw7-dev (affected versions not specified) libxtst6-dbg (affected versions not specified) libxp6-dbg (affected versions not specified) xlibmesa-gl-dev (affected versions not specified) libxi-dev (affected versions not specified) xlibmesa-gl-dbg (affected versions not specified) libxmuu1 (affected versions not specified) libxmuu-dev (affected versions not specified) xspecs (affected versions not specified) x-window-system-dev (affected versions not specified) libxtrap6 (affected versions not specified) libsm6-dbg (affected versions not specified) libxtrap6-dbg (affected versions not specified) xfs (affected versions not specified) libxi6-dbg (affected versions not specified) xlibmesa-dri-dbg (affected versions not specified) libxv1-dbg (affected versions not specified) libxmu-dev (affected versions not specified) libxmu6-dbg (affected versions not specified) xfonts-base (affected versions not specified) libx11-6-dbg (affected versions not specified) libxpm4 (affected versions not specified) libxaw7 (affected versions not specified) xdmx (affected versions not specified) xlibs-dev (affected versions not specified) xlibs-data (affected versions not specified) x-window-system-core (affected versions not specified) lbxproxy (affected versions not specified) libxaw6 (affected versions not specified) libxext6 (affected versions not specified) libxft1-dbg (affected versions not specified) libxt6-dbg (affected versions not specified)

Description The issue is related to multiple vulnerabilities in various packages of the Debian GNU/Linux operating system, including x-window-system, xfonts-75dpi-transcoded, libxfont1-dbg, and others. These vulnerabilities can be exploited remotely and may lead to a violation of confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited through a buffer overflow in the X.Org Xserver before version 1.4.1 and the libfont and libXfont libraries on some platforms, including Sun Solaris.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-119

CWE-189

CWE-787

Related Identifiers

BDU:2015-01186

BDU:2015-01187

BDU:2015-01188

BDU:2015-01189

BDU:2015-01190

BDU:2015-01191

BDU:2015-01192

BDU:2015-01193

BDU:2015-01194

BDU:2015-01195

BDU:2015-01196

BDU:2015-01197

BDU:2015-01198

BDU:2015-01199

BDU:2015-01200

BDU:2015-01201

BDU:2015-01202

BDU:2015-01203

BDU:2015-01204

BDU:2015-01205

BDU:2015-01206

BDU:2015-01207

BDU:2015-01208

BDU:2015-01209

BDU:2015-01210

BDU:2015-01211

BDU:2015-01212

BDU:2015-01213

BDU:2015-01214

BDU:2015-01215

BDU:2015-01216

BDU:2015-01217

BDU:2015-01218

BDU:2015-01219

BDU:2015-01220

BDU:2015-01221

BDU:2015-01222

BDU:2015-01223

BDU:2015-01224

BDU:2015-01225

BDU:2015-01226

BDU:2015-01227

BDU:2015-01228

BDU:2015-01229

BDU:2015-01230

BDU:2015-01231

BDU:2015-01232

BDU:2015-01233

BDU:2015-01234

BDU:2015-01235

BDU:2015-01236

BDU:2015-01237

BDU:2015-01238

BDU:2015-01239

BDU:2015-01240

BDU:2015-01241

BDU:2015-01242

BDU:2015-01243

BDU:2015-01244

BDU:2015-01245

BDU:2015-01246

BDU:2015-01247

BDU:2015-01248

BDU:2015-01249

BDU:2015-01250

BDU:2015-01251

BDU:2015-01252

BDU:2015-01253

BDU:2015-01254

BDU:2015-01255

BDU:2015-01256

BDU:2015-01257

BDU:2015-01258

BDU:2015-01259

BDU:2015-01260

BDU:2015-01261

BDU:2015-01262

BDU:2015-01263

BDU:2015-01264

BDU:2015-01265

BDU:2015-01266

BDU:2015-01267

BDU:2015-01268

BDU:2015-01269

BDU:2015-01270

BDU:2015-01271

BDU:2015-01272

BDU:2015-01273

BDU:2015-01274

BDU:2015-01275

BDU:2015-01276

BDU:2015-01277

BDU:2015-01447

BDU:2015-01448

BDU:2015-01449

BDU:2015-01450

BDU:2015-01451

BDU:2015-09611

CVE-2008-0006

DSA-1466-2

DTSA-110-1

HPSBUX02381

OPENSUSE-SU-2024:11525-1

RHSA-2008:0029

RHSA-2008:0030

RHSA-2008:0064

RHSA-2008_0030

RHSA-2008_0064

Affected Products

Hp-Ux

Red Hat

Sun Solaris

Lbxproxy

Libxfont

Libdps-Dev

Libdps1

Libdps1-Dbg

Libsm-Dev

Libsm6

Libsm6-Dbg

Libx11-6

Libx11-6-Dbg

Libx11-Dev

Libxaw6

Libxaw6-Dbg

Libxaw6-Dev

Libxaw7

Libxaw7-Dbg

Libxaw7-Dev

Libxext-Dev

Libxext6

Libxfont-Dev

Libxfont1

Libxft1-Dbg

Libxi-Dev

Libxi6

Libxi6-Dbg

Libxmuu-Dev

Libxmu6

Libxmu6-Dbg

Libxmuu1

Libxmuu1-Dbg

Libxpm-Dev

Libxp6

Libxp6-Dbg

Libxpm4

Libxpm4-Dbg

Libxrandr-Dev

Libxrandr2

Libxrandr2-Dbg

Libxt-Dev

Libxt6

Libxt6-Dbg

Libxtrap-Dev

Libxtrap6

Libxtrap6-Dbg

Libxtst-Dev

Libxtst6

Libxtst6-Dbg

Libxv-Dev

Libxv1

Libxv1-Dbg

Pm-Dev

Proxymngr

X-Dev

X-Window-System

X-Window-System-Core

X-Window-System-Dev

Xdm

Xdmx

Xdmx-Tools

Xfonts-100Dpi

Xfonts-100Dpi-Transcoded

Xfonts-75Dpi

Xfonts-75Dpi-Transcoded

Xfonts-Base

Xfonts-Base-Transcoded

Xfonts-Cyrillic

Xfonts-Scalable

Xfree86-Common

Xfs

Xfwp

Xlibmesa-Dev

Xlibmesa-Dri

Xlibmesa-Dri-Dbg

Xlibmesa-Glu

Xlibmesa-Gl-Dbg

Xlibmesa-Gl-Dev

Xlibmesa3

Xlibosmesa3-Dbg

Xlibosmesa4

Xlibosmesa4-Dbg

Xlibs

Xlibs-Data

Xlibs-Dev

Xmh

Xnest

Xorg-Server

Xspecs

Xutils

Xvfb

References · 315

• https://bdu.fstec.ru/vul/2015-01262 · Security Note
• http://secunia.com/advisories/28592 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06650 · Security Note
• https://bdu.fstec.ru/vul/2015-06634 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1377 · Security Note
• https://bdu.fstec.ru/vul/2015-01271 · Security Note
• https://bdu.fstec.ru/vul/2015-01214 · Security Note
• http://secunia.com/advisories/28535 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06609 · Security Note
• https://bdu.fstec.ru/vul/2015-08396 · Security Note
• https://bdu.fstec.ru/vul/2015-06619 · Security Note
• https://bdu.fstec.ru/vul/2015-06653 · Security Note
• https://bdu.fstec.ru/vul/2015-06656 · Security Note
• https://bdu.fstec.ru/vul/2015-06648 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html · Vendor Advisory