Description
Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local users to execute arbitrary code by copying data from a large pixel depth pixmap into a smaller pixel depth pixmap.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.novell.com/linux/security/advisories/2007_54_xorg.html ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:178 ↗
- http://lists.freedesktop.org/archives/xorg-announce/2007-September/000378.html ↗
- http://osvdb.org/37726 ↗
- http://secunia.com/advisories/26823 ↗
- https://issues.rpath.com/browse/RPL-1728 ↗
- http://security.gentoo.org/glsa/glsa-200710-16.xml ↗
- http://secunia.com/advisories/26859 ↗
- http://secunia.com/advisories/27147 ↗
- http://www.redhat.com/support/errata/RHSA-2007-0898.html ↗
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:022 ↗
- http://www.securityfocus.com/bid/25606 ↗
- http://www.ubuntu.com/usn/usn-514-1 ↗
- http://secunia.com/advisories/26743 ↗
- http://secunia.com/advisories/27228 ↗
- http://secunia.com/advisories/30161 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36535 ↗
- http://www.gentoo.org/security/en/glsa/glsa-200805-07.xml ↗
- http://www.securitytracker.com/id?1018665 ↗
- http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0187 ↗
- http://secunia.com/advisories/26897 ↗
- http://secunia.com/advisories/26755 ↗
- http://bugs.freedesktop.org/show_bug.cgi?id=7447 ↗
- http://secunia.com/advisories/26763 ↗
- http://support.avaya.com/elmodocs2/security/ASA-2007-394.htm ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10430 ↗
- http://secunia.com/advisories/27179 ↗
- http://bugs.gentoo.org/show_bug.cgi?id=191964 ↗
- http://www.debian.org/security/2007/dsa-1372 ↗
- http://www.vupen.com/english/advisories/2007/3098 ↗