NVD

Id
1335  
Name
CVE-2008-1377  
Description
The (1) SProcRecordCreateContext and (2) SProcRecordRegisterClients functions in the Record extension and the (3) SProcSecurityGenerateAuthorization function in the Security extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via requests with crafted length values that specify an arbitrary number of bytes to be swapped on the heap, which triggers heap corruption.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-16  
Modified Date
2011-03-07  
Seq
2008-1377  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8465 1335 CVE-2008-1377 ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-1377.diff  View
8466 1335 CVE-2008-1377 SSRT080083  View
8467 1335 CVE-2008-1377 20080611 Multiple Vendor X Server Record and Security Extensions Multiple Memory Corruption Vulnerabilities  View
8468 1335 CVE-2008-1377 APPLE-SA-2009-02-12  View
8469 1335 CVE-2008-1377 [xorg] 20080611 X.Org security advisory june 2008 - Multiple vulnerabilities in X server extensions  View
8470 1335 CVE-2008-1377 SUSE-SA:2008:027  View
8471 1335 CVE-2008-1377 SUSE-SR:2008:019  View
8472 1335 CVE-2008-1377 oval:org.mitre.oval:def:10109  View
8473 1335 CVE-2008-1377 RHSA-2008:0502  View
8474 1335 CVE-2008-1377 RHSA-2008:0504  View
8475 1335 CVE-2008-1377 RHSA-2008:0512  View
8476 1335 CVE-2008-1377 GLSA-200806-07  View
8477 1335 CVE-2008-1377 1020247  View
8478 1335 CVE-2008-1377 238686  View
8479 1335 CVE-2008-1377 http://support.apple.com/kb/HT3438  View
8480 1335 CVE-2008-1377 http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm  View
8481 1335 CVE-2008-1377 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201  View
8482 1335 CVE-2008-1377 DSA-1595  View
8483 1335 CVE-2008-1377 GLSA-200807-07  View
8484 1335 CVE-2008-1377 MDVSA-2008:115  View
8485 1335 CVE-2008-1377 MDVSA-2008:116  View
8486 1335 CVE-2008-1377 RHSA-2008:0503  View
8487 1335 CVE-2008-1377 20080620 rPSA-2008-0200-1 xorg-server  View
8488 1335 CVE-2008-1377 20080621 rPSA-2008-0201-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs  View
8489 1335 CVE-2008-1377 USN-616-1  View
8490 1335 CVE-2008-1377 ADV-2008-1803  View
8491 1335 CVE-2008-1377 ADV-2008-1833  View
8492 1335 CVE-2008-1377 ADV-2008-1983  View
8493 1335 CVE-2008-1377 ADV-2008-3000  View
8494 1335 CVE-2008-1377 https://issues.rpath.com/browse/RPL-2607  View
8495 1335 CVE-2008-1377 https://issues.rpath.com/browse/RPL-2619  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46137 JVNDB-2008-001447 X.Org の X server の複数関数における任意のコードを実行される脆弱性 X.Org の X server における レコード拡張の SProcRecordCreateContext 関数 および SProcRecordRegisterClients 関数、セキュリティ拡張の SProcSecurityGenerateAuthorization 関数には、任意のコードが実行される脆弱性が存在します CVE-2008-1377 31490 CVE-2008-1377 1335 9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001447.html 2008-06-11 2009-03-11 View