CVE

Id
27925  
CVE No.
CVE-2007-4568  
Status
Candidate  
Description
Integer overflow in the build_range function in X.Org X Font Server (xfs) before 1.0.5 allows context-dependent attackers to execute arbitrary code via (1) QueryXBitmaps and (2) QueryXExtents protocol requests with crafted size values, which triggers a heap-based buffer overflow.  
Phase
Assigned (20070828)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
288119 27925 CVE-2007-4568 IDEFENSE:20071002 Multiple Vendor X Font Server Multiple Vulnerabilities  View
288120 27925 CVE-2007-4568 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=602  View
288121 27925 CVE-2007-4568 BUGTRAQ:20071003 rPSA-2007-0205-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs  View
288122 27925 CVE-2007-4568 URL:http://www.securityfocus.com/archive/1/archive/1/481432/100/0/threaded  View
288123 27925 CVE-2007-4568 MLIST:[xorg-announce] 20071002 [ANNOUNCE] X.Org security advisory: multiple vulnerabilities in X font server  View
288124 27925 CVE-2007-4568 URL:http://lists.freedesktop.org/archives/xorg-announce/2007-October/000416.html  View
288125 27925 CVE-2007-4568 CONFIRM:https://issues.rpath.com/browse/RPL-1756  View
288126 27925 CVE-2007-4568 CONFIRM:http://bugs.freedesktop.org/show_bug.cgi?id=12298  View
288127 27925 CVE-2007-4568 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=194606  View
288128 27925 CVE-2007-4568 CONFIRM:http://docs.info.apple.com/article.html?artnum=307430  View
288129 27925 CVE-2007-4568 CONFIRM:http://docs.info.apple.com/article.html?artnum=307562  View
288130 27925 CVE-2007-4568 APPLE:APPLE-SA-2008-02-11  View
288131 27925 CVE-2007-4568 URL:http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html  View
288132 27925 CVE-2007-4568 APPLE:APPLE-SA-2008-03-18  View
288133 27925 CVE-2007-4568 URL:http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html  View
288134 27925 CVE-2007-4568 DEBIAN:DSA-1385  View
288135 27925 CVE-2007-4568 URL:http://www.debian.org/security/2007/dsa-1385  View
288136 27925 CVE-2007-4568 FEDORA:FEDORA-2007-4263  View
288137 27925 CVE-2007-4568 URL:https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00352.html  View
288138 27925 CVE-2007-4568 GENTOO:GLSA-200710-11  View
288139 27925 CVE-2007-4568 URL:http://security.gentoo.org/glsa/glsa-200710-11.xml  View
288140 27925 CVE-2007-4568 MANDRIVA:MDKSA-2007:210  View
288141 27925 CVE-2007-4568 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2007:210  View
288142 27925 CVE-2007-4568 REDHAT:RHSA-2008:0029  View
288143 27925 CVE-2007-4568 URL:http://www.redhat.com/support/errata/RHSA-2008-0029.html  View
288144 27925 CVE-2007-4568 REDHAT:RHSA-2008:0030  View
288145 27925 CVE-2007-4568 URL:http://www.redhat.com/support/errata/RHSA-2008-0030.html  View
288146 27925 CVE-2007-4568 SUNALERT:103114  View
288147 27925 CVE-2007-4568 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-103114-1  View
288148 27925 CVE-2007-4568 SUNALERT:200642  View
288149 27925 CVE-2007-4568 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-200642-1  View
288150 27925 CVE-2007-4568 SUSE:SUSE-SA:2007:054  View
288151 27925 CVE-2007-4568 URL:http://www.novell.com/linux/security/advisories/2007_54_xorg.html  View
288152 27925 CVE-2007-4568 CERT:TA08-043B  View
288153 27925 CVE-2007-4568 URL:http://www.us-cert.gov/cas/techalerts/TA08-043B.html  View
288154 27925 CVE-2007-4568 BID:25898  View
288155 27925 CVE-2007-4568 URL:http://www.securityfocus.com/bid/25898  View
288156 27925 CVE-2007-4568 OVAL:oval:org.mitre.oval:def:10882  View
288157 27925 CVE-2007-4568 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10882  View
288158 27925 CVE-2007-4568 VUPEN:ADV-2007-3337  View
288159 27925 CVE-2007-4568 URL:http://www.vupen.com/english/advisories/2007/3337  View
288160 27925 CVE-2007-4568 VUPEN:ADV-2007-3338  View
288161 27925 CVE-2007-4568 URL:http://www.vupen.com/english/advisories/2007/3338  View
288162 27925 CVE-2007-4568 VUPEN:ADV-2007-3467  View
288163 27925 CVE-2007-4568 URL:http://www.vupen.com/english/advisories/2007/3467  View
288164 27925 CVE-2007-4568 VUPEN:ADV-2008-0495  View
288165 27925 CVE-2007-4568 URL:http://www.vupen.com/english/advisories/2008/0495/references  View
288166 27925 CVE-2007-4568 VUPEN:ADV-2008-0924  View
288167 27925 CVE-2007-4568 URL:http://www.vupen.com/english/advisories/2008/0924/references  View
288168 27925 CVE-2007-4568 SECTRACK:1018763  View
288169 27925 CVE-2007-4568 URL:http://www.securitytracker.com/id?1018763  View
288170 27925 CVE-2007-4568 SECUNIA:27040  View
288171 27925 CVE-2007-4568 URL:http://secunia.com/advisories/27040  View
288172 27925 CVE-2007-4568 SECUNIA:27052  View
288173 27925 CVE-2007-4568 URL:http://secunia.com/advisories/27052  View
288174 27925 CVE-2007-4568 SECUNIA:27060  View
288175 27925 CVE-2007-4568 URL:http://secunia.com/advisories/27060  View
288176 27925 CVE-2007-4568 SECUNIA:27168  View
288177 27925 CVE-2007-4568 URL:http://secunia.com/advisories/27168  View
288178 27925 CVE-2007-4568 SECUNIA:27176  View
288179 27925 CVE-2007-4568 URL:http://secunia.com/advisories/27176  View
288180 27925 CVE-2007-4568 SECUNIA:27240  View
288181 27925 CVE-2007-4568 URL:http://secunia.com/advisories/27240  View
288182 27925 CVE-2007-4568 SECUNIA:27560  View
288183 27925 CVE-2007-4568 URL:http://secunia.com/advisories/27560  View
288184 27925 CVE-2007-4568 SECUNIA:27228  View
288185 27925 CVE-2007-4568 URL:http://secunia.com/advisories/27228  View
288186 27925 CVE-2007-4568 SECUNIA:28004  View
288187 27925 CVE-2007-4568 URL:http://secunia.com/advisories/28004  View
288188 27925 CVE-2007-4568 SECUNIA:28536  View
288189 27925 CVE-2007-4568 URL:http://secunia.com/advisories/28536  View
288190 27925 CVE-2007-4568 SECUNIA:28542  View
288191 27925 CVE-2007-4568 URL:http://secunia.com/advisories/28542  View
288192 27925 CVE-2007-4568 SECUNIA:28891  View
288193 27925 CVE-2007-4568 URL:http://secunia.com/advisories/28891  View
288194 27925 CVE-2007-4568 SECUNIA:29420  View
288195 27925 CVE-2007-4568 URL:http://secunia.com/advisories/29420  View
288196 27925 CVE-2007-4568 XF:xfs-protocol-requests-bo(36919)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52247 JVNDB-2007-000937 mcstrans におけるサービス運用妨害 (DoS) の脆弱性 Red Hat Enterprise Linux に含まれる mcstrans には、MCS translation デーモンにおいて、機密レベルの区分範囲の処理に不備が存在するために、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-4570 27925 1.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000937.html  View