GLSA Advocate
Joined: 12 May 2004 Posts: 2663
|
Posted: Tue May 02, 2006 8:26 pm Post subject: [ GLSA 200605-02 ] X.Org: Buffer overflow in XRender extensi |
|
|
Gentoo Linux Security Advisory
Title: X.Org: Buffer overflow in XRender extension (GLSA 200605-02)
Severity: high
Exploitable: local
Date: May 02, 2006
Bug(s): #130979
ID: 200605-02
Synopsis
A buffer overflow in the XRender extension potentially allows any X.Org
user to execute arbitrary code with elevated privileges.
Background
X.Org is X.Org Foundation's public implementation of the X Window
System.
Affected Packages
Package: x11-base/xorg-x11
Vulnerable: < 6.8.2-r7
Unaffected: >= 6.8.2-r7
Architectures: All supported architectures
Description
X.Org miscalculates the size of a buffer in the XRender extension.
Impact
An X.Org user could exploit this issue to make the X server
execute arbitrary code with elevated privileges.
Workaround
There is no known workaround at this time.
Resolution
All X.Org users should upgrade to the latest version:
Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=x11-base/xorg-x11-6.8.2-r7" |
References
CVE-2006-1526
Last edited by GLSA on Sat Sep 08, 2012 4:21 am; edited 9 times in total |
|