CVE-2005-2495

Опубликовано: 15 сент. 2005

Источник: nvd

CVSS2: 5.1

EPSS Низкий

Описание

Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.

Ссылки

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.22/SCOSA-2006.22.txt
ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U
http://marc.info/?l=bugtraq&m=112690609622266&w=2
http://secunia.com/advisories/16777
Vendor Advisory
http://secunia.com/advisories/16790
Vendor Advisory
http://secunia.com/advisories/17044
Vendor Advisory
http://secunia.com/advisories/17215
Vendor Advisory
http://secunia.com/advisories/17258
Vendor Advisory
http://secunia.com/advisories/17278
Vendor Advisory
http://secunia.com/advisories/19624
Vendor Advisory
http://secunia.com/advisories/19796
Vendor Advisory
http://secunia.com/advisories/21318
Vendor Advisory
http://securitytracker.com/id?1014887
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101926-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101953-1
http://support.avaya.com/elmodocs2/security/ASA-2005-218.pdf
http://support.avaya.com/elmodocs2/security/ASA-2005-226.pdf
http://www.debian.org/security/2005/dsa-816
http://www.gentoo.org/security/en/glsa/glsa-200509-07.xml
http://www.kb.cert.org/vuls/id/102441
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:xfree86_project:xfree86:3.3.6:*:*:*:*:*:*:*

cpe:2.3:a:xfree86_project:xfree86:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:xfree86_project:xfree86:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:xfree86_project:xfree86:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:xfree86_project:xfree86:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:xfree86_project:xfree86:4.1.0:*:*:*:*:*:*:*

cpe:2.3:a:xfree86_project:xfree86:4.2.0:*:*:*:*:*:*:*

cpe:2.3:a:xfree86_project:xfree86:4.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.03923

Низкий

5.1 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2005-2495

ubuntu

почти 21 год назад

Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.

CVE-2005-2495

redhat

почти 21 год назад

Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.

CVE-2005-2495

debian

почти 21 год назад

Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted ...

GHSA-g92c-jq66-562r

github

около 4 лет назад

Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.

EPSS

Процентиль: 89%

0.03923

Низкий

5.1 Medium

CVSS2

Дефекты

CWE-189