National Cyber-Alert System

Vulnerability Summary for CVE-2005-2495

Overview

Multiple integer overflows in XFree86 before 4.3.0 allow user-assisted attackers to execute arbitrary code via a crafted pixmap image.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#102441

Name: VU#102441

Hyperlink:http://www.kb.cert.org/vuls/id/102441

External Source: HP

Name: SSRT051024

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/442163/100/0/threaded

External Source: FEDORA

Name: FLSA:168264-2

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/427045/100/0/threaded

External Source: REDHAT

Name: RHSA-2005:501

Type: Advisory

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-501.html

External Source: REDHAT

Name: RHSA-2005:396

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-396.html

External Source: REDHAT

Name: RHSA-2005:329

Hyperlink:http://www.redhat.com/support/errata/RHSA-2005-329.html

External Source: SUSE

Name: SUSE-SA:2005:056

Hyperlink:http://www.novell.com/linux/security/advisories/2005_56_xserver.html

External Source: SUSE

Name: SUSE-SR:2005:023

Hyperlink:http://www.novell.com/linux/security/advisories/2005_23_sr.html

External Source: MANDRAKE

Name: MDKSA-2005:164

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:164

External Source: GENTOO

Name: GLSA-200509-07

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200509-07.xml

External Source: VUPEN

Name: ADV-2006-3140

Hyperlink:http://www.frsirt.com/english/advisories/2006/3140

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2005-226.pdf

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2005-226.pdf

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2005-218.pdf

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2005-218.pdf

External Source: SUNALERT

Name: 101953

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-101953-1

External Source: SECUNIA

Name: 21318

Hyperlink:http://secunia.com/advisories/21318

External Source: SECUNIA

Name: 17278

Hyperlink:http://secunia.com/advisories/17278

External Source: SECUNIA

Name: 17258

Hyperlink:http://secunia.com/advisories/17258

External Source: SECUNIA

Name: 17215

Hyperlink:http://secunia.com/advisories/17215

External Source: SECUNIA

Name: 17044

Hyperlink:http://secunia.com/advisories/17044

External Source: TRUSTIX

Name: 2005-0049

Hyperlink:http://marc.theaimsgroup.com/?l=bugtraq&m=112690609622266&w=2

External Source: SGI

Name: 20060403-01-U

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20060403-01-U

External Source: XF

Name: xorg-pixmap-bo(22244)

Hyperlink:http://xforce.iss.net/xforce/xfdb/22244

External Source: BID

Name: 14807

Hyperlink:http://www.securityfocus.com/bid/14807

External Source: FEDORA

Name: FEDORA-2005-894

Hyperlink:http://www.securityfocus.com/advisories/9286

External Source: FEDORA

Name: FEDORA-2005-893

Hyperlink:http://www.securityfocus.com/advisories/9285

External Source: UBUNTU

Name: USN-182-1

Hyperlink:http://www.securityfocus.com/advisories/9242

External Source: OSVDB

Name: 19352

Hyperlink:http://www.osvdb.org/19352

External Source: DEBIAN

Name: DSA-816

Hyperlink:http://www.debian.org/security/2005/dsa-816

External Source: SUNALERT

Name: 101926

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-101926-1

External Source: SECTRACK

Name: 1014887

Hyperlink:http://securitytracker.com/id?1014887

External Source: SECUNIA

Name: 19796

Hyperlink:http://secunia.com/advisories/19796

External Source: SECUNIA

Name: 19624

Hyperlink:http://secunia.com/advisories/19624

External Source: SECUNIA

Name: 16790

Hyperlink:http://secunia.com/advisories/16790

External Source: SECUNIA

Name: 16777

Hyperlink:http://secunia.com/advisories/16777

External Source: SCO

Name: SCOSA-2006.22

Hyperlink:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.22/SCOSA-2006.22.txt

US Government Resource: oval:org.mitre.oval:def:998

Name: oval:org.mitre.oval:def:998

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:998

US Government Resource: oval:org.mitre.oval:def:1044

Name: oval:org.mitre.oval:def:1044

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1044