xorg-x11: privilege escalation [LWN.net]

Package(s):

xorg-x11 xfree86

CVE #(s):

CVE-2006-3739 CVE-2006-3740

Created:

September 12, 2006

Updated:

December 14, 2006

Description:

iDefense reported two integer overflow flaws in the way the X.org server processed CID font files. A malicious authorized client could exploit this issue to cause a denial of service (crash) or potentially execute arbitrary code with root privileges on the X.org server.

Alerts:

Mandriva	MDKSA-2006:164-2	2006-12-14
Mandriva	MDKSA-2006:164-1	2006-11-17
Debian	DSA-1193-1	2006-10-09
SuSE	SUSE-SR:2006:023	2006-09-27
Slackware	SSA:2006-259-01	2006-09-18
Mandriva	MDKSA-2006:164	2006-09-14
Gentoo	200609-07	2006-09-13
Ubuntu	USN-344-1	2006-09-12
Red Hat	RHSA-2006:0666-01	2006-09-12
Red Hat	RHSA-2006:0665-01	2006-09-12
rPath	rPSA-2006-0167-1	2006-09-12

(Log in to post comments)