NVD

Id
2281  
Name
CVE-2008-2362  
Description
Multiple integer overflows in the Render extension in the X server 1.4 in X.Org X11R7.3 allow context-dependent attackers to execute arbitrary code via a (1) SProcRenderCreateLinearGradient, (2) SProcRenderCreateRadialGradient, or (3) SProcRenderCreateConicalGradient request with an invalid field specifying the number of bytes to swap in the request data, which triggers heap memory corruption.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-16  
Modified Date
2011-03-07  
Seq
2008-2362  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
14555 2281 CVE-2008-2362 ftp://ftp.freedesktop.org/pub/xorg/X11R7.3/patches/xorg-xserver-1.4-cve-2008-2362.diff  View
14556 2281 CVE-2008-2362 20080611 Multiple Vendor X Server Render Extension Gradient Creation Integer Overflow Vulnerability  View
14557 2281 CVE-2008-2362 APPLE-SA-2009-02-12  View
14558 2281 CVE-2008-2362 [xorg] 20080611 X.Org security advisory june 2008 - Multiple vulnerabilities in X server extensions  View
14559 2281 CVE-2008-2362 SUSE-SA:2008:027  View
14560 2281 CVE-2008-2362 SUSE-SR:2008:019  View
14561 2281 CVE-2008-2362 oval:org.mitre.oval:def:11246  View
14562 2281 CVE-2008-2362 RHSA-2008:0504  View
14563 2281 CVE-2008-2362 GLSA-200806-07  View
14564 2281 CVE-2008-2362 1020245  View
14565 2281 CVE-2008-2362 238686  View
14566 2281 CVE-2008-2362 http://support.apple.com/kb/HT3438  View
14567 2281 CVE-2008-2362 http://support.avaya.com/elmodocs2/security/ASA-2008-249.htm  View
14568 2281 CVE-2008-2362 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0201  View
14569 2281 CVE-2008-2362 DSA-1595  View
14570 2281 CVE-2008-2362 GLSA-200807-07  View
14571 2281 CVE-2008-2362 MDVSA-2008:116  View
14572 2281 CVE-2008-2362 MDVSA-2008:179  View
14573 2281 CVE-2008-2362 20080620 rPSA-2008-0200-1 xorg-server  View
14574 2281 CVE-2008-2362 20080621 rPSA-2008-0201-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs  View
14575 2281 CVE-2008-2362 29670  View
14576 2281 CVE-2008-2362 USN-616-1  View
14577 2281 CVE-2008-2362 ADV-2008-1803  View
14578 2281 CVE-2008-2362 ADV-2008-1833  View
14579 2281 CVE-2008-2362 ADV-2008-1983  View
14580 2281 CVE-2008-2362 https://issues.rpath.com/browse/RPL-2607  View
14581 2281 CVE-2008-2362 https://issues.rpath.com/browse/RPL-2619  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46141 JVNDB-2008-001451 X.Org の X server の Render 拡張における複数の整数オーバーフローの脆弱性 X.Org の X server における Render 拡張には、任意のコードが実行される複数の整数オーバーフローの脆弱性が存在します。 CVE-2008-2362 32475 CVE-2008-2362 2281 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001451.html 2008-06-11 2009-03-11 View