[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248268

 
 

909

 
 

195051

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2010-4819Date: (C)2012-09-05   (M)2023-12-22


The ProcRenderAddGlyphs function in the Render extension (render/render.c) in X.Org xserver 1.7.7 and earlier allows local users to read arbitrary memory and possibly cause a denial of service (server crash) via unspecified vectors related to an "input sanitization flaw."

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 3.6
Exploit Score: 3.9
Impact Score: 4.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: PARTIAL
  
Reference:
SECTRACK-1026149
RHSA-2011:1359
RHSA-2011:1360
http://www.openwall.com/lists/oss-security/2011/09/22/8
http://www.openwall.com/lists/oss-security/2011/09/23/5
http://aix.software.ibm.com/aix/efixes/security/X_advisory2.asc
http://cgit.freedesktop.org/xorg/xserver/commit/render/render.c?id=5725849a1b427cd4a72b84e57f211edb35838718
https://bugs.freedesktop.org/show_bug.cgi?id=28801

CPE    3
cpe:/a:x:x.org-xserver:1.7.7:rc2
cpe:/a:x:x.org-xserver:1.7.6.902
cpe:/a:x:x.org-xserver:1.7
CWE    1
CWE-20
OVAL    9
oval:org.secpod.oval:def:1100059
oval:org.secpod.oval:def:200190
oval:org.secpod.oval:def:1601225
oval:org.secpod.oval:def:1503390
...

© SecPod Technologies