CVE-2008-1377 The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server....
HighCVSS 9.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x11 | = r7.3 | No fix listed |
| debian/xorg-server(Debian:12) | < 2:1.4.1~git20080517-2 | 2:1.4.1~git20080517-2 |
| debian/xorg-server(Debian:13) | < 2:1.4.1~git20080517-2 | 2:1.4.1~git20080517-2 |
| debian/xorg-server(Debian:14) | < 2:1.4.1~git20080517-2 | 2:1.4.1~git20080517-2 |
References
- SSRT080083 vendor-advisory
- 20080611 Multiple Vendor X Server Record and Security Extensions Multiple Memory Corruption Vulnerabilities third-party-advisory
- APPLE-SA-2009-02-12 vendor-advisory
- [xorg] 20080611 X.Org security advisory june 2008 - Multiple vulnerabilities in X server extensions mailing-list
- SUSE-SA:2008:027 patch vendor-advisory
- SUSE-SR:2008:019 vendor-advisory
- RHSA-2008:0502 patch vendor-advisory
- RHSA-2008:0504 vendor-advisory
- RHSA-2008:0512 vendor-advisory
- 30627 third-party-advisory vendor-advisory
- 30628 third-party-advisory vendor-advisory
- 30629 third-party-advisory vendor-advisory
- 30630 third-party-advisory vendor-advisory
- 30637 third-party-advisory vendor-advisory
- 30659 third-party-advisory vendor-advisory
- 30664 third-party-advisory vendor-advisory
- 30666 third-party-advisory vendor-advisory
- 30671 third-party-advisory
- 30715 third-party-advisory
- 30772 third-party-advisory
- 30809 third-party-advisory
- 30843 third-party-advisory
- 31025 third-party-advisory
- 31109 third-party-advisory
- 32099 third-party-advisory
- 32545 third-party-advisory
- 33937 third-party-advisory
- GLSA-200806-07 vendor-advisory
- 1020247 vdb-entry
- 238686 vendor-advisory
- support.apple.com
- support.avaya.com
- wiki.rpath.com
- DSA-1595 patch vendor-advisory
- GLSA-200807-07 vendor-advisory
- MDVSA-2008:115 vendor-advisory
- MDVSA-2008:116 vendor-advisory
- RHSA-2008:0503 vendor-advisory
- 20080620 rPSA-2008-0200-1 xorg-server mailing-list
- 20080621 rPSA-2008-0201-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs mailing-list
- USN-616-1 patch vendor-advisory
- ADV-2008-1803 vdb-entry
- ADV-2008-1833 vdb-entry
- ADV-2008-1983 vdb-entry
- ADV-2008-3000 vdb-entry
- issues.rpath.com
- issues.rpath.com
- oval:org.mitre.oval:def:10109 signature vdb-entry
- Debian Security Tracker CVE-2008-1377 vendor-advisory