Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Gentoo: GLSA-200509-07 High: X.Org Heap Overflow Code Execution

gentoo
Calendar Grey September 12, 2005
Scroller Gentoo
X.Org buffer overflow vulnerability enables unauthorized code execution. Gentoo advisory GLSA 200509-08 elaborates on the problem and solution.
An integer overflow in pixmap memory allocation potentially allows any X.Org user to execute arbitrary code with elevated privileges.

Summary

Gentoo Linux Security Advisory GLSA 200509-07 https://security.gentoo.org/ Severity: High Title: X.Org: Heap overflow in pixmap allocation Date: September 12, 2005 Bugs: #105688 ID: 200509-07

Synopsis ======= An integer overflow in pixmap memory allocation potentially allows any X.Org user to execute arbitrary code with elevated privileges.
Background ========= X.Org is X.Org Foundation's Public Implementation of the X Window System.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 x11-base/xorg-x11 < 6.8.2-r3 >= 6.8.2-r3
========== X.Org is missing an integer overflow check during pixmap memory allocation.
Impact ===== An X.Org user could exploit this issue to...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo high severity code execution heap overflow X.Org pixmap allocation

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo high severity code execution heap overflow X.Org pixmap allocation

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround