XFree86多个未明整数溢出漏洞

漏洞信息详情

XFree86多个未明整数溢出漏洞

漏洞简介

XFree86 4.3.0版本的字体库存在多个整数溢出漏洞。本地或者远程攻击者借助基于堆和基于栈的缓冲区溢出攻击导致服务拒绝或者执行任意代码。

漏洞公告

Reportedly, this issue has been addressed in the current XFree86 CVS tree, but Symantec has not confirmed this.
Please see the referenced advisories for more information.
RedHat XFree86-ISO8859-9-75dpi-fonts-4.2.0-72.i386.rpm

RedHat XFree86-100dpi-fonts-4.0.3-5.i386.rpm

RedHat XFree86-Xnest-4.2.0-72.i386.rpm

RedHat XFree86-base-fonts-4.2.0-8.i386.rpm

RedHat XFree86-ISO8859-9-100dpi-fonts-4.2.0-8.i386.rpm

RedHat XFree86-Xnest-4.1.0-3.i386.rpm

RedHat XFree86-ISO8859-15-75dpi-fonts-4.1.0-3.ia64.rpm

RedHat XFree86-75dpi-fonts-4.1.0-3.i386.rpm

RedHat XFree86-Xnest-4.1.0-3.ia64.rpm

RedHat XFree86-xfs-4.2.0-8.i386.rpm

Sun Solaris 8

RedHat XFree86-100dpi-fonts-4.2.0-72.i386.rpm

RedHat XFree86-twm-4.0.3-5.i386.rpm

RedHat XFree86-font-utils-4.2.0-72.i386.rpm

RedHat XFree86-ISO8859-2-75dpi-fonts-4.1.0-3.i386.rpm

RedHat XFree86-Xnest-4.2.0-8.i386.rpm

RedHat XFree86-ISO8859-2-75dpi-fonts-4.2.0-72.i386.rpm

RedHat XFree86-ISO8859-9-75dpi-fonts-2.1.2-16.noarch.rpm

RedHat XFree86-100dpi-fonts-4.1.0-3.ia64.rpm

RedHat XFree86-ISO8859-15-75dpi-fonts-4.1.0-3.i386.rpm

RedHat XFree86-libs-4.1.0-3.i386.rpm

RedHat XFree86-ISO8859-9-100dpi-fonts-4.1.0-3.i386.rpm

RedHat XFree86-libs-4.0.3-5.i386.rpm

RedHat XFree86-Xvfb-4.0.3-5.i386.rpm

参考网址

来源: BID
名称: 8514
链接:http://www.securityfocus.com/bid/8514

来源: REDHAT
名称: RHSA-2003:286
链接:http://www.redhat.com/support/errata/RHSA-2003-286.html

来源: DEBIAN
名称: DSA-380
链接:http://www.debian.org/security/2003/dsa-380

来源: BUGTRAQ
名称: 20030830 Multiple integer overflows in XFree86 (local/remote)
链接:http://marc.theaimsgroup.com/?l=bugtraq&m=106229335312429&w=2

来源: REDHAT
名称: RHSA-2003:289
链接:http://www.redhat.com/support/errata/RHSA-2003-289.html

来源: REDHAT
名称: RHSA-2003:288
链接:http://www.redhat.com/support/errata/RHSA-2003-288.html

来源: SGI
名称: 20031101-01-U
链接:ftp://patches.sgi.com/support/free/security/advisories/20031101-01-U.asc

来源: NETBSD
名称: NetBSD-SA2003-015
链接:ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-015.txt.asc

来源: REDHAT
名称: RHSA-2003:287
链接:http://www.redhat.com/support/errata/RHSA-2003-287.html

来源: MANDRAKE
名称: MDKSA-2003:089
链接:http://www.mandriva.com/security/advisories?name=MDKSA-2003:089

来源: VUPEN
名称: ADV-2007-0589
链接:http://www.frsirt.com/english/advisories/2007/0589

来源: support.avaya.com
链接:http://support.avaya.com/elmodocs2/security/ASA-2007-074.htm

来源: SUNALERT
名称: 102803
链接:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102803-1

来源: SECUNIA
名称: 24247
链接:http://secunia.com/advisories/24247

来源: SECUNIA
名称: 24168
链接:http://secunia.com/advisories/24168

来源: CONECTIVA
名称: CLA-2004:821
链接:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821

© 版权声明
THE END
喜欢就支持一下吧
点赞0 分享