Описание
Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 2:1.14.3-3ubuntu2.1 |
| lucid | ignored | end of life |
| precise | released | 2:1.11.4-0ubuntu10.14 |
| quantal | released | 2:1.13.0-0ubuntu6.4 |
| raring | released | 2:1.13.3-0ubuntu6.2 |
| upstream | released | 2:1.14.3-4 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| lucid | DNE | |
| precise | released | 2:1.13.0-0ubuntu6.1~precise4 |
| quantal | DNE | |
| raring | DNE | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| lucid | DNE | |
| precise | released | 2:1.13.3-0ubuntu6~precise3 |
| quantal | DNE | |
| raring | DNE | |
| upstream | needs-triage |
Показывать по
EPSS
6.5 Medium
CVSS2
Связанные уязвимости
Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.
Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.
Use-after-free vulnerability in the doImageText function in dix/dixfon ...
Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted ImageText request that triggers memory-allocation failure.
ELSA-2013-1426: xorg-x11-server security update (IMPORTANT)
EPSS
6.5 Medium
CVSS2