LWN.net Logo

X.org: integer overflows

Package(s):xorg, xorg-server CVE #(s):CVE-2006-6101 CVE-2006-6102 CVE-2006-6103
Created:January 10, 2007 Updated:March 8, 2007
Description: A number of integer overflows have turned up in the X.org server. Some of these overflows involve calls to alloca(), and thus make corruption of the stack relatively easy. This vulnerability is exploitable by anybody who can make a connection to the server, meaning that it is a local root exploit in most settings. See this advisory for details.
Alerts:
Slackware SSA:2007-066-02 2007-03-08
Gentoo 200701-25 2007-01-27
Debian DSA-1249-1 2007-01-15
SuSE SUSE-SA:2007:008 2007-01-12
rPath rPSA-2007-0005-1 2007-01-09
Red Hat RHSA-2007:0002-01 2007-01-10
Red Hat RHSA-2007:0003-01 2007-01-10
Mandriva MDKSA-2007-005 2007-01-09
Fedora FEDORA-2007-035 2007-01-09
Fedora FEDORA-2007-036 2007-01-09
Ubuntu USN-403-1 2007-01-09

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds