NVD

Id
35319  
Name
CVE-2014-8099  
Description
The XVideo extension in XFree86 4.0.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) SProcXvQueryExtension, (2) SProcXvQueryAdaptors, (3) SProcXvQueryEncodings, (4) SProcXvGrabPort, (5) SProcXvUngrabPort, (6) SProcXvPutVideo, (7) SProcXvPutStill, (8) SProcXvGetVideo, (9) SProcXvGetStill, (10) SProcXvPutImage, (11) SProcXvShmPutImage, (12) SProcXvSelectVideoNotify, (13) SProcXvSelectPortNotify, (14) SProcXvStopVideo, (15) SProcXvSetPortAttribute, (16) SProcXvGetPortAttribute, (17) SProcXvQueryBestSize, (18) SProcXvQueryPortAttributes, (19) SProcXvQueryImageAttributes, or (20) SProcXvListImageFormats function.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-10  
Modified Date
2017-01-02  
Seq
2014-8099  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180865 35319 CVE-2014-8099 http://advisories.mageia.org/MGASA-2014-0532.html  View
180866 35319 CVE-2014-8099 61947  View
180867 35319 CVE-2014-8099 DSA-3095  View
180868 35319 CVE-2014-8099 MDVSA-2015:119  View
180869 35319 CVE-2014-8099 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
180870 35319 CVE-2014-8099 71600  View
180871 35319 CVE-2014-8099 http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/  View
180872 35319 CVE-2014-8099 GLSA-201504-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
17101 JVNDB-2014-005976 複数の X.Org 製品の XVideo エクステンションにおけるサービス運用妨害 (DoS) の脆弱性 XFree86、X.Org X Window System (別名 X11 または X)、および X.Org Server (別名 xserver および xorg-server) の XVideo エクステンションには、サービス運用妨害 (out-of-bounds read および out-of-bounds write) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2014-8099 75392 CVE-2014-8099 35319 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005976.html 2014-12-09 2015-06-04 View