CVE Database
/

CVE-2014-8093

Back to search

CVE-2014-8093

Published: Dec 10, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple integer overflows in the GLX extension in XFree86 4.0, X.Org X Window System (aka X11 or X) X11R6.7, and X.Org Server (aka xserver and xorg-server) before 1.16.3 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted request to the (1) __glXDisp_ReadPixels, (2) __glXDispSwap_ReadPixels, (3) __glXDisp_GetTexImage, (4) __glXDispSwap_GetTexImage, (5) GetSeparableFilter, (6) GetConvolutionFilter, (7) GetHistogram, (8) GetMinmax, (9) GetColorTable, (10) __glXGetAnswerBuffer, (11) __GLX_GET_ANSWER_BUFFER, (12) __glXMap1dReqSize, (13) __glXMap1fReqSize, (14) Map2Size, (15) __glXMap2dReqSize, (16) __glXMap2fReqSize, (17) __glXImageSize, or (18) __glXSeparableFilter2DReqSize function, which triggers an out-of-bounds read or write.

VendorProductVersions

n/a

n/a

affected
n/a

References

DSA-3095
vendor-advisory
x_refsource_DEBIAN
GLSA-201504-06
vendor-advisory
x_refsource_GENTOO
62292
third-party-advisory
x_refsource_SECUNIA
71596
vdb-entry
x_refsource_BID
MDVSA-2015:119
vendor-advisory
x_refsource_MANDRIVA
61947
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now