diff options
| author | flz <flz@FreeBSD.org> | 2007-10-08 20:05:08 +0800 |
|---|---|---|
| committer | flz <flz@FreeBSD.org> | 2007-10-08 20:05:08 +0800 |
| commit | 42fb7de6ca3362178aae22c870fd4abec61d46a1 (patch) | |
| tree | 7381941a8408beb54972d0c691ac81dd8124c106 /security/vuxml | |
| parent | 01ce594de76eba8b26bd9e53284b5f3e796a7d2d (diff) | |
| download | freebsd-ports-gnome-42fb7de6ca3362178aae22c870fd4abec61d46a1.tar.gz freebsd-ports-gnome-42fb7de6ca3362178aae22c870fd4abec61d46a1.tar.zst freebsd-ports-gnome-42fb7de6ca3362178aae22c870fd4abec61d46a1.zip | |
Document xfs -- multiple vulnerabilities.
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 35 |
1 files changed, 35 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 7ab94ca9102b..786cc3947559 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,41 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="a5f667db-7596-11dc-8b7a-0019b944b34e"> + <topic>xfs -- multiple vulnerabilites</topic> + <affects> + <package> + <name>xfs</name> + <range><lt>1.0.5,1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Matthieu Herrb reports:</p> + <blockquote cite="http://lists.freedesktop.org/archives/xorg/2007-October/028899.html"> + <h1>Problem Description:</h1> + <p>Several vulnerabilities have been identified in xfs, the X font + server. The QueryXBitmaps and QueryXExtents protocol requests + suffer from lack of validation of their 'length' parameters.</p> + <h1>Impact:</h1> + <p>On most modern systems, the font server is accessible only for + local clients and runs with reduced privileges, but on some + systems it may still be accessible from remote clients and + possibly running with root privileges, creating an opportunity + for remote privilege escalation.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2007-4568</cvename> + <url>http://lists.freedesktop.org/archives/xorg/2007-October/028899.html</url> + </references> + <dates> + <discovery>2007-10-02</discovery> + <entry>2007-10-08</entry> + </dates> + </vuln> + <vuln vid="a058d6fa-7325-11dc-ae10-0016179b2dd5"> <topic>tcl/tk -- buffer overflow in ReadImage function</topic> <affects> |