[ GLSA 200605-02 ] X.Org: Buffer overflow in XRender extension

[GLSA]

Gentoo Linux Security Advisory

Title: X.Org: Buffer overflow in XRender extension (GLSA 200605-02)
Severity: high
Exploitable: local
Date: May 02, 2006
Bug(s): #130979
ID: 200605-02

Synopsis


A buffer overflow in the XRender extension potentially allows any X.Org
user to execute arbitrary code with elevated privileges.


Background


X.Org is X.Org Foundation's public implementation of the X Window
System.


Affected Packages

Package: x11-base/xorg-x11
Vulnerable: < 6.8.2-r7
Unaffected: >= 6.8.2-r7
Architectures: All supported architectures


Description


X.Org miscalculates the size of a buffer in the XRender extension.


Impact


An X.Org user could exploit this issue to make the X server
execute arbitrary code with elevated privileges.


Workaround


There is no known workaround at this time.


Resolution


All X.Org users should upgrade to the latest version: