CVE-2008-2360 Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields....
HighCVSS 9.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the AllocateGlyph function in the Render extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to execute arbitrary code via unspecified request fields that are used to calculate a heap buffer size, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x11 | = r7.3 | No fix listed |
| debian/xorg-server(Debian:12) | < 2:1.4.1~git20080517-2 | 2:1.4.1~git20080517-2 |
| debian/xorg-server(Debian:13) | < 2:1.4.1~git20080517-2 | 2:1.4.1~git20080517-2 |
| debian/xorg-server(Debian:14) | < 2:1.4.1~git20080517-2 | 2:1.4.1~git20080517-2 |
References
- 20080611 Multiple Vendor X Server Render Extension AllocateGlyph() Integer Overflow Vulnerability third-party-advisory
- APPLE-SA-2009-02-12 vendor-advisory
- [xorg] 20080611 X.Org security advisory june 2008 - Multiple vulnerabilities in X server extensions mailing-list patch
- SUSE-SA:2008:027 patch vendor-advisory
- SUSE-SR:2008:019 vendor-advisory
- RHSA-2008:0502 patch vendor-advisory
- RHSA-2008:0504 patch vendor-advisory
- RHSA-2008:0512 patch vendor-advisory
- 30627 patch third-party-advisory vendor-advisory
- 30628 third-party-advisory vendor-advisory
- 30629 third-party-advisory vendor-advisory
- 30630 third-party-advisory vendor-advisory
- 30637 patch third-party-advisory vendor-advisory
- 30659 third-party-advisory vendor-advisory
- 30664 patch third-party-advisory vendor-advisory
- 30666 patch third-party-advisory vendor-advisory
- 30671 third-party-advisory
- 30715 third-party-advisory
- 30772 third-party-advisory
- 30809 third-party-advisory
- 30843 third-party-advisory
- 31025 third-party-advisory
- 31109 third-party-advisory
- 32099 third-party-advisory
- 33937 third-party-advisory
- GLSA-200806-07 vendor-advisory
- 1020243 vdb-entry
- 238686 vendor-advisory
- support.apple.com
- support.avaya.com
- wiki.rpath.com
- DSA-1595 patch vendor-advisory
- GLSA-200807-07 vendor-advisory
- MDVSA-2008:115 vendor-advisory
- MDVSA-2008:116 vendor-advisory
- MDVSA-2008:179 vendor-advisory
- RHSA-2008:0503 vendor-advisory
- 20080620 rPSA-2008-0200-1 xorg-server mailing-list
- 20080621 rPSA-2008-0201-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs mailing-list
- USN-616-1 vendor-advisory
- ADV-2008-1803 vdb-entry
- ADV-2008-1833 vdb-entry
- ADV-2008-1983 vdb-entry
- issues.rpath.com
- issues.rpath.com
- oval:org.mitre.oval:def:9329 signature vdb-entry
- Debian Security Tracker CVE-2008-2360 vendor-advisory