Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

Debian: DSA 1294-1 Critical: X Window Privilege Escalation Risk

debian
Calendar Grey May 17, 2007
Debian Logo
- --------------------------------------------------------------------------Debian Security Advisory
Several vulnerabilities have been discovered in the X Window System, which may lead to privilege escalation
Topics%20covered

Topics Covered

security advisory denial of service critical debian privilege escalation integer overflow X Window System

Summary


Sean Larsson discovered an integer overflow in the XC-MISC extension,
which might lead to denial of service or local privilege escalation.

CVE-2007-1351

Greg MacManus discovered an integer overflow in the font handling,
which might lead to denial of service or local privilege escalation.

CVE-2007-1352

Greg MacManus discovered an integer overflow in the font handling,
which might lead to denial of service or local privilege escalation.

CVE-2007-1667

Sami Leides discovered an integer overflow in the libx11 library
which might lead to the execution of arbitrary code.
This update introduces tighter sanity checking of input passed to
XCreateImage(). To cope with this an updated rdesktop package is
delivered along with this security update. Another application
reported to break is the proprietary Opera browser, which isn't
part of Debian. The vendor has released updated packages, though.

For the old stable distribution (sarge) th...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory denial of service critical debian privilege escalation integer overflow X Window System

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here