NVD

Id
35320  
Name
CVE-2014-8100  
Description
The Render extension in XFree86 4.0.1, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allows remote authenticated users to cause a denial of service (out-of-bounds read or write) or possibly execute arbitrary code via a crafted length or index value to the (1) ProcRenderQueryVersion, (2) SProcRenderQueryVersion, (3) SProcRenderQueryPictFormats, (4) SProcRenderQueryPictIndexValues, (5) SProcRenderCreatePicture, (6) SProcRenderChangePicture, (7) SProcRenderSetPictureClipRectangles, (8) SProcRenderFreePicture, (9) SProcRenderComposite, (10) SProcRenderScale, (11) SProcRenderCreateGlyphSet, (12) SProcRenderReferenceGlyphSet, (13) SProcRenderFreeGlyphSet, (14) SProcRenderFreeGlyphs, or (15) SProcRenderCompositeGlyphs function.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-10  
Modified Date
2017-01-02  
Seq
2014-8100  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180873 35320 CVE-2014-8100 http://advisories.mageia.org/MGASA-2014-0532.html  View
180874 35320 CVE-2014-8100 61947  View
180875 35320 CVE-2014-8100 DSA-3095  View
180876 35320 CVE-2014-8100 MDVSA-2015:119  View
180877 35320 CVE-2014-8100 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
180878 35320 CVE-2014-8100 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
180879 35320 CVE-2014-8100 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
180880 35320 CVE-2014-8100 71602  View
180881 35320 CVE-2014-8100 http://www.x.org/wiki/Development/Security/Advisory-2014-12-09/  View
180882 35320 CVE-2014-8100 GLSA-201504-06  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
17102 JVNDB-2014-005977 複数の X.Org 製品の Render エクステンションにおけるサービス運用妨害 (DoS) の脆弱性 XFree86、X.Org X Window System (別名 X11 または X)、および X.Org Server (別名 xserver および xorg-server) の Render エクステンションには、サービス運用妨害 (out-of-bounds read および out-of-bounds write) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2014-8100 75393 CVE-2014-8100 35320 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005977.html 2014-12-09 2015-11-06 View