CVE-2005-2495: xfree86 project xfree86 – CVSS 5.1 · Watchpost

← All vulnerabilities

CVE-2005-2495

MEDIO 5.1CVE-2005-2495 · Published 15/09/2005 · updated 16/06/2026

In breve

CVE-2005-2495 è una vulnerabilità MEDIO (CVSS 5.1) che riguarda xfree86 (xfree86 project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.9%, superiore al 90.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
xfree86 xfree86_project	`= 3.3.6= 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.1.0= 4.2.0= 4.2.1`	No fix yet

Description

Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.

References

ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.22/SCOSA-2006.22.txt
patches.sgi.com/support/free/security/advisories/20060403-01-U
marc.info
secunia.com/advisories/16777 · Vendor Advisory
secunia.com/advisories/16790 · Vendor Advisory
secunia.com/advisories/17044 · Vendor Advisory
secunia.com/advisories/17215 · Vendor Advisory
secunia.com/advisories/17258 · Vendor Advisory
secunia.com/advisories/17278 · Vendor Advisory
secunia.com/advisories/19624 · Vendor Advisory
secunia.com/advisories/19796 · Vendor Advisory
secunia.com/advisories/21318 · Vendor Advisory
securitytracker.com/id
sunsolve.sun.com/search/document.do

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free